Multicast VXLAN (MVXLAN) transmits multicast traffic from a multicast source to multicast receivers in an EVPN network that uses VXLAN in the data plane.

Restrictions: Hardware compatibility with MVXLAN

MVXLAN is supported only in Release 6616 and later.

Restrictions: Underlay network restriction

MVXLAN supports only IPv4 underlay networks in the current software version.

If an MVXLAN tunnel has multiple next hops on the underlay network, use interfaces of the same type as outgoing interfaces to the next hops as a best practice. The outgoing interfaces can be Layer 3 interfaces, Layer 3 subinterfaces, or VLAN interfaces.

MVXLAN benefits

MVXLAN provides the following benefits:

· On-demand multicast forwarding—Creates multicast distribution trees and manages multicast group members by using BGP EVPN routes and PIM.

· Inter-VXLAN multicast forwarding—Uses distributed EVPN gateways to forward Layer 3 multicast traffic between VXLANs.

MVXLAN network model

As shown in Figure 1, distributed EVPN gateways are collocated with the VTEPs, and MVXLANs are created on the VTEPs to direct multicast traffic forwarding. When receiving multicast packets, a VTEP forwards them through ACs and MVXLAN tunnels to multicast receivers.

For more information about VTEPs, VSIs, and VXLANs, see VXLAN Configuration Guide. For more information about EVPN configuration, see "Configuring EVPN."

Figure 1 MVXLAN network model

Basic concepts in MVXLAN

The following are the basic concepts in MVXLAN:

· Multicast distribution tree (MDT)—An MDT is a multicast distribution tree constructed by all VTEPs in the same MVXLAN. MDTs include the default MDT and the data MDT.

· Default group—A default group is a unique multicast address assigned to each MVXLAN on the public network. It is the unique identifier of an MVXLAN on the public network and helps build the default MDT for an MVXLAN on the public network. Packets of the private multicast groups in an MVXLAN are encapsulated into packets of the default group before they are transmitted on the public network.

· Default MDT—A default MDT uses a default group address as its group address. The default MDT of an MVXLAN is uniquely identified by the default group and transmits all private multicast packets of the MVXLAN. A default MDT is automatically created after the default group is specified and will always exist on the public network, regardless of whether multicast services exist on the public network or MVXLAN.

· Data group—An MVXLAN is assigned a unique data group for MDT switchover. When the multicast traffic of an MVXLAN reaches or exceeds a threshold, the ingress VTEP selects a least used address from the data group range to encapsulate the multicast packets of the MVXLAN. Other VTEPs are notified to use the address to forward the traffic of the MVXLAN. This initiates the switchover to the data MDT.

· Data MDT—A data MDT is an MDT that uses a data group as it group address. At MDT switchover, VTEPs with downstream receivers join a data group to build a data MDT. The ingress VTEP forwards the encapsulated MVXLAN multicast traffic along the data MDT over the public network.

How MVXLAN works

MDT-based transmission

On the public network, MVXLAN multicast traffic is forwarded along an MDT rooted at the multicast source-side VTEP to leaf receiver-side VTEPs through unidirectional MVXLAN tunnels. MDT-based transmission ensures that multicast traffic is forwarded along optimal paths.

MP-BGP extension for MVXLAN

To support MVXLAN, MP-BGP introduces the following routes for creating MDTs under the EVPN address family:

· Supplementary broadcast domain selective multicast Ethernet tag (SBD-SMET) route—Contains private multicast source address and private multicast group address information. A receiver-side VTEP uses the SBD-SMET route to advertise its interest in a specific (*, G) or (S, G). An SBD-SMET route carries the RD configured in VPN instance view and export targets configured in VPN instance IPv4 address family view.

· Selective provider multicast service interface route—Also known as S-PMSI A-D route. An S-PMSI A-D route contains the private multicast source address, private multicast group address, default or data group address, and MVXLAN source interface address. S-PMSI A-D routes are used by the multicast source-side VTEP and its BGP peers to establish the default MDT and switch traffic from the default MDT to a data MDT. An S-PMSI A-D route carries the RD configured in VPN instance view and export targets configured in VPN instance IPv4 address family view.

Automatic MVXLAN tunnel establishment and assignment

In an MVXLAN network, VTEPs automatically establish MVXLAN tunnels and assign them to MVXLANs to forward Layer 3 multicast traffic. The tunnel source is the MVXLAN source interface address, and the tunnel destination is the default or data group address. An MVXLAN tunnel is a unidirectional tunnel from the multicast source-side VTEP to a multicast receiver-side VTEP.

Default MDT establishment

The multicast routing protocol running on the public network can be PIM-SM or PIM-SSM. The process of creating a default MDT is the same in these PIM modes. All VTEPs in an MVXLAN join the default MDT of the MVXLAN. The private multicast packets of the MVXLAN are forwarded along the default MDT to the VTEPs, no matter whether the site attached to a VTEP contains receivers.

Figure 2 Default MDT establishment in a PIM-SM network

As shown in Figure 2, PIM-SM runs on the public network, and MVXLAN is configured on all VTEPs. The process for establishing a default MDT is as follows:

1. VTEP 1 sends an S-PMSI A-D route that contains (*, *) to VTEP 2 and VTEP 3.

2. VTEP 2 and VTEP 3 receive the route and join a multicast group according to the PMSI tunnel attribute of the route. The PMSI tunnel attribute contains the following information:

¡ The multicast source is the IP address of the MVXLAN source interface on VTEP 1.

¡ The multicast group is the default group configured on VTEP 1.

3. Multicast forwarding entries are created on each device along the paths on the public network, and a shortest path tree (SPT) with VTEP 1 as the root and VTEP 2 and VTEP 3 as leaves is created. The SPT is the default MDT.

Default MDT-based transmission

After the default MDT is established, the multicast source sends the private multicast traffic to the receivers in each site along the default MDT. The private multicast packets are encapsulated into public multicast packets on the local VTEP and transmitted along the default MDT. Then, they are decapsulated on the remote VTEPs and transmitted in remote VXLAN sites.

Figure 3 Multicast data packet transmission

As shown in Figure 3, PIM-SM runs on the public network, the multicast source is attached to VTEP 1, and the multicast receiver is attached to VTEP 2. The multicast forwarding process is as follows:

1. The multicast source sends private multicast packets (192.1.1.1, 225.1.1.1) to VTEP 1.

2. VTEP 1 creates a multicast forwarding entry for (192.1.1.1, 225.1.1.1).

3. VTEP 1 processes the packets based on whether the receiver has joined the private multicast group:

¡ If the receiver has sent an IGMP join message to VTEP 2, VTEP 1 has an SBD-SMET route sent by VTEP 1 that contains (*, G). VTEP 1 adds VXLAN encapsulation to the packets according to the route and forwards them to VTEP 2 and VTEP 3 along the default MDT. In the outer IP header of the VXLAN packets, the source IP address is the IP address of the MVXLAN source interface, and the destination IP address is the default group address.

¡ If no receiver exists, VTEP 1 drops the packets.

4. VTEP 2 decapsulates the VXLAN packets and forwards the private multicast packets to the receiver.

5. VTEP 3 decapsulates the VXLAN packets and drops the private multicast packets because no local receiver exists.

MDT switchover

An MVXLAN can use the default MDT or a data MDT for multicast traffic forwarding. The default MDT is uniquely identified by the default group, and a data MDT is uniquely identified by a data group. Each default group is associated with a data group range.

Switching from the default MDT to a data MDT

When a multicast packet of an MVXLAN is transmitted through the default MDT on the public network, the packet is forwarded to all VTEPs configured with the VPN instance of the MVXLAN. This occurs whether or not any active receivers exist in the sites attached to the VTEPs. When the rate of the multicast traffic of that MVXLAN is high, multicast traffic might be flooded on the public network. This increases the bandwidth use and brings extra burden on the VTEPs.

To optimize multicast transmission, the MDT-based MVXLAN solution introduces a dedicated data MDT. The data MDT is built between the VTEPs that are attached to MVXLAN multicast receivers and multicast sources. When specific network criteria are met, multicast traffic is switched from the default MDT to the data MDT.

A switchover from the default MDT to the data MDT is initiated as follows:

1. The source-side VTEP periodically examines the forwarding rate of the MVXLAN multicast traffic. The default MDT switches to the data MDT only when both of the following criteria are met:

¡ The private multicast traffic has passed the ACL rule filtering for default MDT to data MDT switchover.

¡ The traffic rate of the private multicast stream has stayed above the switchover threshold for a certain period of time.

2. The source-side VTEP selects a least-used address from the data group range and sends an S-PMSI A-D route to all the other VTEPs down the default MDT. This route contains the private multicast source address, private multicast group address, IP address of the MVXLAN source interface, and data group address.

3. Each VTEP that receives the route examines whether it has receivers of that private multicast stream.

If so, it joins the data MDT rooted at the source-side VTEP. Otherwise, it caches the route and will join the data MDT when it has attached receivers.

4. After sending the S-PMSI A-D route, the source-side VTEP starts the data-delay timer. When the timer expires, the source-side VTEP uses the data group address to encapsulate the private multicast traffic. The multicast traffic is then forwarded down the data MDT.

5. After the multicast traffic is switched from the default MDT to the data MDT, a downstream VTEP can leave the data MDT by sending a PIM prune message if it no longer has active receivers attached to it.

Switching from the data MDT to the default MDT

After the MXVLAN multicast traffic is switched to the data MDT, the multicast traffic conditions might change and no longer meet the switchover criterion. In this case, the source-side VTEP initiates a backward MDT switchover process when any of the following criteria are met:

· The traffic rate of the MVXLAN multicast traffic has stayed below the switchover threshold for a certain period of time.

· The associated data group range is changed, and the data group address for encapsulating the MVXLAN multicast traffic is not in the new address range.

· The ACL rule for controlling the switchover from the default MDT to the data MDT has changed, and the MVXLAN multicast traffic fails to pass the new ACL rule.

DRNI in MVXLAN

IMPORTANT:

To use this feature, make sure the site network and the underlay network are both IPv4 networks.

This feature is supported only in Release 6635 and later.

Overview

As shown in Figure 4, you can use Distributed Resilient Network Interconnect (DRNI) to virtualize two VTEPs or border devices into a distributed relay (DR) system to prevent single points of failure from interrupting traffic. The VTEPs or border devices can have both multicast sources and receivers attached. For more information about DRNI, see Layer 2—LAN Switching Configuration Guide.

Figure 4 DRNI in MVXLAN

Mechanisms

In a DR system, the DR member devices synchronize multicast traffic and multicast join requests (IGMP membership reports or PIM join messages) over the intra-portal link (IPL) to maintain consistency in multicast source and receiver information. When one DR member device fails or its uplink or downlink fails, the other DR member device forwards all multicast traffic to avoid traffic interruption.

As shown in Figure 4, the DR system formed by VTEP 1 and VTEP 2 operates as follows:

1. VTEP 1 and VTEP 2 set up MVXLAN tunnels with the other devices on the network. The MVXLAN tunnels use the virtual VTEP address as the multicast source and the default group address as the destination address.

2. When receiving the multicast join requests sent by the multicast receivers on aggregate interface 2, VTEP 1 sends the requests over the IPL to VTEP 2.

3. Both VTEP 1 and VTEP 2 create multicast forwarding entries for the multicast join requests and send SBD-SMET routes to the multicast source-side VTEP.

4. When receiving the multicast traffic sent by the multicast source on aggregate interface 1, VTEP 1 sends the multicast traffic over the IPL to VTEP 2.

5. VTEP 1 and VTEP 2 forward the multicast traffic according to the following rules:

¡ The DR member device with an odd DR system number forwards traffic destined for odd multicast group addresses.

¡ The DR member device with an even DR system number forwards traffic destined for even multicast group addresses.

¡ When one DR member device fails, the other DR member device forwards all multicast traffic.

6. If the requirements are met for switching traffic from the default MDT to a data MDT, the primary DR member device selects a target data MDT and advertises the data MDT to the secondary DR member device through an SBD-SMET route.

7. The secondary DR member device acts as follows:

¡ If the data group exists on the device, the device uses that data group for multicast forwarding.

¡ If the data group does not exist or the device does not receive the SBD-SMET route, the device selects a local data group.

Configuring MVXLAN

MVXLAN tasks at a glance

To configure MVXLAN, perform the following tasks:

1. Configuring EVPN

a. Configuring a VXLAN on a VSI

b. Mapping ACs to a VSI

c. Configuring an EVPN instance

d. Configuring BGP to advertise BGP EVPN routes

e. Configuring a distributed EVPN gateway

For more information about EVPN configuration, see "Configuring VXLAN EVPN."

2. Configuring IGMP and IGMP snooping

a. Enabling IGMP on a VSI interface

b. Enabling IGMP snooping

c. Configuring IGMP snooping proxying

For more information about IGMP and IGMP snooping configuration, see IP Multicast Configuration Guide.

3. Configuring PIM on the transport-facing interfaces of VTEPs

Choose one of the following tasks:

¡ Configuring PIM-SM

¡ Configuring PIM-SSM

For more information about PIM configuration, see IP Multicast Configuration Guide.

4. Configuring MVXLAN

a. Enabling IP multicast routing for a VPN instance

b. Creating an MVXLAN

c. Configuring a default group

d. Specifying the MVXLAN source interface

e. Configuring MDT switchover parameters

f. Configuring a VSI interface as a distributed DR interface

g. Configuring an MVXLAN extranet RPF selection policy

h. Configuring DRNI in MVXLAN

Enabling IP multicast routing for a VPN instance

1. Enter system view.

system-view

2. Enable IP multicast routing for a VPN instance and enter MRIB view.

multicast routing vpn-instance instance-name

By default, IP multicast routing is disabled for VPN instances.

For more information about this command, see multicast routing and forwarding commands in IP Multicast Command Reference.

Creating an MVXLAN

About this task

You can create one or multiple MDT-based MVXLANs on a VTEP to provide services for different VPN instances and the public instance.

Creating an MVXLAN for a VPN instance

1. Enter system view.

system-view

2. Create an MDT-based MVXLAN and enter MVXLAN view.

multicast-vpn vxlan vpn-instance instance-name mode mdt

Creating an MVXLAN for the public instance

1. Enter system view.

system-view

2. Create an MDT-based MVXLAN and enter MVXLAN view.

multicast-vpn vxlan public-instance mode mdt

Create an MVXLAN for the public instance on the VTEP connected to public multicast receivers only when the public multicast receivers receive multicast traffic from a VPN instance. As a best practice to ensure correct multicast traffic forwarding in the public network and VPN instances, do not create an MVXLAN for the public instance in other situations.

Configuring a default group

About this task

When adding VXLAN encapsulation to private multicast packets, the VTEP uses the default group as the destination IP address in the outer IP header.

Restrictions and guidelines

The default group for an MVXLAN must be unique among any of the following objects:

· The default group used by any other MVXLAN.

· The data group used by any other MVXLAN.

· The multicast group address for VXLAN flood traffic configured by using the group command in VXLAN view. For more information about the group command, see VXLAN Command Reference.

Procedure

1. Enter system view.

system-view

2. Enter MVXLAN view.

multicast-vpn vxlan vpn-instance instance-name mode mdt

3. Create the MVXLAN IPv4 address family and enter its view.

address-family ipv4

4. Configure the default group.

default-group group-address

By default, no default group exists.

Specifying the MVXLAN source interface

About this task

When adding VXLAN encapsulation to private multicast packets, the VTEP uses the IP address of the MVXLAN source interface as the source IP address in the outer IP header.

Restrictions and guidelines

For the VTEP to obtain correct routing information, you must specify the interface used for establishing BGP peer relationships as the MVXLAN source interface.

Procedure

1. Enter system view.

system-view

2. Enter MVXLAN view.

multicast-vpn vxlan vpn-instance instance-name mode mdt

3. Enter MVXLAN IPv4 address family view.

address-family ipv4

4. Specify the MVXLAN source interface.

source interface-type interface-number

By default, no MVXLAN source interface is specified.

Configuring MDT switchover parameters

About this task

The traffic rate of the private multicast traffic might fluctuate around the MDT switchover threshold. To avoid frequent switching of multicast traffic between the default MDT and a data MDT, set the data-delay period. MDT switchover does not take place immediately after the multicast traffic rate exceeds the switchover threshold. It takes place after a data-delay period, during which the traffic rate must stay above the switchover threshold.

Restrictions and guidelines

On a VTEP, the data group range for an MVXLAN cannot include any of the following objects:

· The default group of any other MVXLAN.

· The multicast group address for VXLAN flood traffic configured by using the group command in VXLAN view. For more information about the group command, see VXLAN Command Reference.

· The data groups of any other MVXLAN.

All VPN instances share the data group resources. As a best practice to avoid data group resource exhaustion, specify a reasonable data group range for a VPN instance.

Procedure

1. Enter system view.

system-view

2. Enter MVXLAN view.

multicast-vpn vxlan vpn-instance instance-name mode mdt

3. Enter MVXLAN IPv4 address family view.

address-family ipv4

4. Configure the data group range and the switchover criteria.

data-group group-address { mask-length | mask } [ acl acl-number ]

By default, no data group range exists, and the default MDT to data MDT switchover never occurs.

5. Set the data-delay period.

data-delay delay

By default, the data-delay period is 3 seconds.

Configuring a VSI interface as a distributed DR interface

About this task

On the VTEPs configured with MVXLAN, you must specify the VSI interfaces that act as distributed EVPN gateways as distributed designated router (DR) interfaces. This operation ensures that a distributed EVPN gateway can forward multicast traffic to the local site.

Procedure

1. Enter system view.

system-view

2. Enter VSI interface view.

interface vsi-interface interface-number

3. Configure the VSI interface as a distributed DR interface.

pim distributed-dr

By default, a VSI instance is not a distributed DR interface.

Configuring an MVXLAN extranet RPF selection policy

About this task

Perform this task on multicast receiver-side VTEPs.

On multicast receiver-side VTEPs, MVXLAN extranet RPF routing policies are used for multicast transmission when multicast sources and receivers are located in different VPNs.

MVXLAN extranet RPF selection policies identify the multicast traffic to forward between VPN instances based on the VPN instance of traffic.

A VPN instance-based RPF selection policy specifies the VPN instance where a multicast source resides, a multicast source address, and a multicast group address.

· With RPF selection policies configured, a multicast source-side VTEP matches the VPN instance, multicast source address, and multicast group address in multicast packets with RPF selection policies. If a match is found, the VTEP forwards the packets to the receiver VPN instance.

· With RPF selection policies configured, a multicast receiver-side VTEP forwards multicast traffic as follows:

a. Removes the VXLAN header added by the multicast source-side VTEP from received multicast packets. The VXLAN header includes the L3 VXLAN ID of the source VPN instance.

b. Matches the VPN instance, multicast source address, and multicast group address of the packets with RPF selection policies.

c. Forwards the packets in the receiver VPN instance if a match is found.

You must use RPF selection policies on symmetrically configured extranet scenarios. The source VPN instance must be configured on the multicast receiver-side VTEP.

Restrictions and guidelines

The PIM mode in the source VPN instance and the receiver VPN instance must be the same. Only PIM-SM and PIM-SSM are supported.

When you use PIM-SM, use one of the following schemes as a best practice:

· Specifying only the multicast source address—Configure two RPF selection policies as follows:

¡ In one policy, configure the multicast source address as the RP address of the multicast group that requires inter-VPN transmission.

¡ In the other policy, specify the multicast source address of the source VPN instance.

If multiple multicast groups require inter-VPN transmission, configure a dedicated RP for the multicast groups and specify the multicast source address as the RP address in RPF selection policies.

· Specifying only the multicast group address—Configure one RPF selection policy that specifies the multicast group address of the source VPN instance.

When you use PIM-SSM, configure one RPF selection policy that contains both the multicast source address and multicast group address as a best practice.

Multicast packets can only be forwarded between two VPNs. The receiver VPN instance cannot also be the source VPN instance.

If an MVXLAN extranet RPF selection policy with only the multicast group address specified is configured in the receiver VPN instance, multicast traffic transmission will be interrupted in the source VPN instance.

Multicast source addresses in different MVXLAN extranet RPF routing policies cannot be the same, but they can overlap. The same restriction applies to the multicast group addresses in different MVXLAN extranet RPF routing policies. If multiple routing policies exist for an (S, G) entry, the device selects the policy in which the multicast group address has the longest mask. If multiple policies have the same mask length, the device selects the policy in which the multicast source address has the longest mask.

Procedure

1. Enter system view.

system-view

2. Enter MRIB view.

multicast routing [ vpn-instance vpn-instance-name ]

3. Configure an IPv4 MVXLAN extranet RPF selection policy.

multicast extranet select-rpf [ vpn-instance vpn-instance-name ] { source source-address { mask | mask-length } | group group-address { mask | mask-length } } *

Configuring DRNI in MVXLAN

About this task

For two VTEPs or border devices to be identified as one device, you must assign the same IP address to the MVXLAN source interfaces on them and specify that IP address as the virtual VTEP address. The devices use the virtual VTEP address as the multicast source address to set up MVXLAN tunnels with other devices.

Software version and feature compatibility

This feature is supported only in Release 6635 and later.

Restrictions and guidelines

For DRNI in MVXLAN to take effect, you must enable both Layer 2 and Layer 3 multicast.

To use DRNI in MVXLAN, follow these restrictions:

· All ACs must be dualhomed to the DR member devices. Singlehomed ACs are not supported.

· The IPL can only be an Ethernet aggregate link.

· You cannot use DRNI to aggregate the links between two VTEPs or between a VTEP and a border device.

The DR member devices use an odd-even machanism to load share multicast traffic based on the multicast destination address. They do not support load sharing based on the multicast source address.

If the IPL fails, each DR member device sets its MVXLAN tunnel source address to the local DR member device address and forwards multicast traffic only through the default group. Instead of load sharing multicast traffic, each DR member device forwards all received multicast traffic. When the IPL recovers, the DR member devices set the MVXLAN tunnel source addresses to the virtual VTEP address. They are able to perform switchover to data groups and load share multicast traffic.

If you configure both DRNI in MVXLAN and DRNI in EVPN or EVPN-DCI, follow these restrictions and guidelines:

· In addition to DRNI in MVXLAN configuration, you must also execute the evpn drni group command to specify the MVXLAN source interface address as the virtual VTEP address.

· The drni local command takes effect only on a per-MVXLAN basis. The evpn drni local command takes effect globally. If you execute both commands, the per-MVXLAN configuration takes precedence.

Procedure

1. Enter system view.

system-view

2. Enter MVXLAN view.

multicast-vpn vxlan vpn-instance instance-name mode mdt

3. Enter MVXLAN IPv4 address family view.

address-family ipv4

4. Specify the IP addresses of the member devices in the DR system.

drni local local-ipv4-address remote remote-ipv4-address

By default, the IP addresses of the member devices in a DR system are not specified.

5. Specify an MVXLAN source interface to provide the virtual VTEP address.

source interface-type interface-number evpn-drni-group

By default, no MVXLAN source interface is specified.

Display and maintenance commands for MVXLAN

Execute display commands in any view.

Task	Command
Display received data group information in an MVXLAN.	display multicast-vpn vxlan { vpn-instance instance-name \| public-instance } data-group receive [ brief \| [ active \| group group-address \| sender source-address \| vpn-source-address [ mask { mask-length \| mask } ] \| vpn-group-address [ mask { mask-length \| mask } ] ] * ]
Display sent data group information in an MVXLAN.	display multicast-vpn vxlan { vpn-instance instance-name \| public-instance } data-group send [ group group-address \| vpn-source-address [ mask { mask-length \| mask } ] \| vpn-group-address [ mask { mask-length \| mask } ] ] *
Display information about default groups.	display multicast-vpn vxlan [ vpn-instance instance-name \| public-instance ] default-group { local \| remote }

MVXLAN configuration examples

Example: Configuring intra-VPN MVXLAN Layer 3 multicast forwarding

Network configuration

As shown in Figure 5, VM 1 is the multicast source of multicast group 225.0.0.0, and the other VMs are multicast receivers. Configure MVXLAN to forward the multicast traffic from the source to the receivers.

· Configure VXLAN 10 and VXLAN 20 on Switch A and Switch B to extend VLAN 2 and VLAN 3 across the sites.

· Configure Switch A and Switch B as distributed EVPN gateways to provide gateway services. Configure Switch C as a border gateway to provide access to the connected Layer 3 network.

· Configure Switch D as an RR to reflect BGP EVPN routes between Switch A, Switch B, and Switch C.

· Configure PIM-SM on the transport-facing interfaces of Switches A through D. Configure IGMP snooping on Switches A through C for multicast forwarding entry creation.

Figure 5 Network diagram

‌

Procedure

1. Set the hardware resource mode of Switch A, Switch B, and Switch C. This step uses Switch A as an example.

<SwitchA> system-view

[SwitchA] hardware-resource vxlan l3gw

Do you want to change the specified hardware resource working mode? [Y/N]:y

The hardware resource working mode is changed, please save the configuration and

reboot the system to make it effective.

[SwitchA] quit

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait..

.......DONE!

Current configuration may be lost after the reboot, save current configuration?

[Y/N]:y

This command will reboot the device. Continue? [Y/N]:y

2. On VM 1 and VM 3, specify 10.1.1.1 as the gateway address. On VM 2 and VM 4, specify 10.1.2.1 as the gateway address. (Details not shown.)

3. Configure IP addresses and unicast routing settings:

# Assign IP addresses to interfaces, as shown in Figure 5. (Details not shown.)

# Configure OSPF on all transport network switches (Switches A through D) for them to reach one another. (Details not shown.)

4. Configure Switch A:

# Enable L2VPN and IP multicast routing.

<SwitchA> system-view

[SwitchA] l2vpn enable

[SwitchA] multicast routing

[SwitchA-mrib] quit

# Enable the IGMP snooping feature.

[SwitchA] igmp-snooping

[SwitchA-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchA] vxlan tunnel mac-learning disable

[SwitchA] vxlan tunnel arp-learning disable

# Create VLAN-interface 11 and enter its view.

[SwitchA] vlan 11

[SwitchA-vlan11] quit

[SwitchA] interface vlan-interface 11

# Enable PIM-SM on VLAN-interface 11.

[SwitchA-Vlan-interface11] pim sm

[SwitchA-Vlan-interface11] quit

# Create an EVPN instance on VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] evpn encapsulation vxlan

[SwitchA-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchA-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchA-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchA-vsi-vpna] igmp-snooping enable

[SwitchA-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchA-vsi-vpna] vxlan 10

[SwitchA-vsi-vpna-vxlan-10] quit

[SwitchA-vsi-vpna] quit

# Create an EVPN instance on VSI vpnb.

[SwitchA] vsi vpnb

[SwitchA-vsi-vpnb] evpn encapsulation vxlan

[SwitchA-vsi-vpnb-evpn-vxlan] route-distinguisher auto

[SwitchA-vsi-vpnb-evpn-vxlan] vpn-target auto

[SwitchA-vsi-vpnb-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpnb.

[SwitchA-vsi-vpnb] igmp-snooping enable

[SwitchA-vsi-vpnb] igmp-snooping proxy enable

# Create VXLAN 20.

[SwitchA-vsi-vpnb] vxlan 20

[SwitchA-vsi-vpnb-vxlan-20] quit

[SwitchA-vsi-vpnb] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchA] bgp 200

[SwitchA-bgp-default] peer 4.4.4.4 as-number 200

[SwitchA-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchA-bgp-default] address-family l2vpn evpn

[SwitchA-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchA-bgp-default-evpn] quit

[SwitchA-bgp-default] quit

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 1000 to match VLAN 2.

[SwitchA] interface twenty-fivegige 1/0/1

[SwitchA-Twenty-FiveGigE1/0/1] service-instance 1000

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] encapsulation s-vid 2

# Map Ethernet service instance 1000 to VSI vpna.

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] xconnect vsi vpna

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] quit

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 2000 to match VLAN 3.

[SwitchA-Twenty-FiveGigE1/0/1] service-instance 2000

[SwitchA-Twenty-FiveGigE1/0/1-srv2000] encapsulation s-vid 3

# Map Ethernet service instance 2000 to VSI vpnb.

[SwitchA-Twenty-FiveGigE1/0/1-srv2000] xconnect vsi vpnb

[SwitchA-Twenty-FiveGigE1/0/1-srv2000] quit

[SwitchA-Twenty-FiveGigE1/0/1] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchA] ip vpn-instance vpna

[SwitchA-vpn-instance-vpna] route-distinguisher 1:1

[SwitchA-vpn-instance-vpna] address-family ipv4

[SwitchA-vpn-ipv4-vpna] vpn-target 2:2

[SwitchA-vpn-ipv4-vpna] quit

[SwitchA-vpn-instance-vpna] address-family evpn

[SwitchA-vpn-evpn-vpna] vpn-target 1:1

[SwitchA-vpn-evpn-vpna] quit

[SwitchA-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchA] interface vsi-interface 1

[SwitchA-Vsi-interface1] ip binding vpn-instance vpna

[SwitchA-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchA-Vsi-interface1] pim sm

[SwitchA-Vsi-interface1] pim distributed-dr

[SwitchA-Vsi-interface1] mac-address 1-1-1

[SwitchA-Vsi-interface1] distributed-gateway local

[SwitchA-Vsi-interface1] local-proxy-arp enable

[SwitchA-Vsi-interface1] quit

# Configure VSI-interface 2.

[SwitchA] interface vsi-interface 2

[SwitchA-Vsi-interface2] ip binding vpn-instance vpna

[SwitchA-Vsi-interface2] ip address 10.1.2.1 255.255.255.0

[SwitchA-Vsi-interface2] igmp enable

[SwitchA-Vsi-interface2] mac-address 2-2-2

[SwitchA-Vsi-interface2] distributed-gateway local

[SwitchA-Vsi-interface2] local-proxy-arp enable

[SwitchA-Vsi-interface2] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchA] interface vsi-interface 3

[SwitchA-Vsi-interface3] ip binding vpn-instance vpna

[SwitchA-Vsi-interface3] l3-vni 1000

[SwitchA-Vsi-interface3] pim sm

[SwitchA-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchA] multicast routing vpn-instance vpna

[SwitchA-mrib-vpna] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchA] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchA-mvxlan-vpna] address-family ipv4

[SwitchA-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchA-mvxlan-vpna-ipv4] source loopback 0

[SwitchA-mvxlan-vpna-ipv4] data-group 239.0.1.0 25

[SwitchA-mvxlan-vpna-ipv4] quit

[SwitchA-mvxlan-vpna] quit

# Configure Loopback 1.

[SwitchA] interface loopback 1

[SwitchA-LoopBack1] ip binding vpn-instance vpna

[SwitchA-LoopBack1] ip address 12.12.12.12 32

[SwitchA-LoopBack1] pim sm

[SwitchA-LoopBack1] quit

# Enter VPN instance PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchA] pim vpn-instance vpna

[SwitchA-pim-vpna] c-bsr 12.12.12.12

[SwitchA-pim-vpna] c-rp 12.12.12.12

[SwitchA-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] gateway vsi-interface 1

[SwitchA-vsi-vpna] quit

# Specify VSI-interface 2 as the gateway interface for VSI vpnb.

[SwitchA] vsi vpnb

[SwitchA-vsi-vpnb] gateway vsi-interface 2

[SwitchA-vsi-vpnb] quit

5. Configure Switch B:

# Enable L2VPN and IP multicast routing.

<SwitchB> system-view

[SwitchB] l2vpn enable

[SwitchB] multicast routing

[SwitchB-mrib] quit

# Enable the IGMP snooping feature.

[SwitchB] igmp-snooping

[SwitchB-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchB] vxlan tunnel mac-learning disable

[SwitchB] vxlan tunnel arp-learning disable

# Create VLAN-interface 12 and enter its view.

[SwitchB] vlan 12

[SwitchB-vlan12] quit

[SwitchB] interface vlan-interface 12

# Enable PIM-SM on VLAN-interface 12.

[SwitchB-Vlan-interface12] pim sm

[SwitchB-Vlan-interface12] quit

# Create an EVPN instance on VSI vpna.

[SwitchB] vsi vpna

[SwitchB-vsi-vpna] evpn encapsulation vxlan

[SwitchB-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchB-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchB-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchB-vsi-vpna] igmp-snooping enable

[SwitchB-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchB-vsi-vpna] vxlan 10

[SwitchB-vsi-vpna-vxlan-10] quit

[SwitchB-vsi-vpna] quit

# Create an EVPN instance on VSI vpnb.

[SwitchB] vsi vpnb

[SwitchB-vsi-vpnb] evpn encapsulation vxlan

[SwitchB-vsi-vpnb-evpn-vxlan] route-distinguisher auto

[SwitchB-vsi-vpnb-evpn-vxlan] vpn-target auto

[SwitchB-vsi-vpnb-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpnb.

[SwitchB-vsi-vpnb] igmp-snooping enable

[SwitchB-vsi-vpnb] igmp-snooping proxy enable

# Create VXLAN 20.

[SwitchB-vsi-vpnb] vxlan 20

[SwitchB-vsi-vpnb-vxlan-20] quit

[SwitchB-vsi-vpnb] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchB] bgp 200

[SwitchB-bgp-default] peer 4.4.4.4 as-number 200

[SwitchB-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchB-bgp-default] address-family l2vpn evpn

[SwitchB-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchB-bgp-default-evpn] quit

[SwitchB-bgp-default] quit

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 1000 to match VLAN 2.

[SwitchB] interface twenty-fivegige 1/0/1

[SwitchB-Twenty-FiveGigE1/0/1] service-instance 1000

[SwitchB-Twenty-FiveGigE1/0/1-srv1000]encapsulation s-vid 2

# Map Ethernet service instance 1000 to VSI vpna.

[SwitchB-Twenty-FiveGigE1/0/1-srv1000] xconnect vsi vpna

[SwitchB-Twenty-FiveGigE1/0/1-srv1000] quit

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 2000 to match VLAN 3.

[SwitchB-Twenty-FiveGigE1/0/1] service-instance 2000

[SwitchB-Twenty-FiveGigE1/0/1-srv2000] encapsulation s-vid 3

# Map Ethernet service instance 2000 to VSI vpnb.

[SwitchB-Twenty-FiveGigE1/0/1-srv2000] xconnect vsi vpnb

[SwitchB-Twenty-FiveGigE1/0/1-srv2000] quit

[SwitchB-Twenty-FiveGigE1/0/1] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchB] ip vpn-instance vpna

[SwitchB-vpn-instance-vpna] route-distinguisher 1:1

[SwitchB-vpn-instance-vpna] address-family ipv4

[SwitchB-vpn-ipv4-vpna] vpn-target 2:2

[SwitchB-vpn-ipv4-vpna] quit

[SwitchB-vpn-instance-vpna] address-family evpn

[SwitchB-vpn-evpn-vpna] vpn-target 1:1

[SwitchB-vpn-evpn-vpna] quit

[SwitchB-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchB] interface vsi-interface 1

[SwitchB-Vsi-interface1] ip binding vpn-instance vpna

[SwitchB-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchB-Vsi-interface1] igmp enable

[SwitchB-Vsi-interface1] mac-address 1-1-1

[SwitchB-Vsi-interface1] distributed-gateway local

[SwitchB-Vsi-interface1] local-proxy-arp enable

[SwitchB-Vsi-interface1] quit

# Configure VSI-interface 2.

[SwitchB] interface vsi-interface 2

[SwitchB-Vsi-interface2] ip binding vpn-instance vpna

[SwitchB-Vsi-interface2] ip address 10.1.2.1 255.255.255.0

[SwitchB-Vsi-interface2] igmp enable

[SwitchB-Vsi-interface2] mac-address 2-2-2

[SwitchB-Vsi-interface2] distributed-gateway local

[SwitchB-Vsi-interface2] local-proxy-arp enable

[SwitchB-Vsi-interface2] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchB] interface vsi-interface 3

[SwitchB-Vsi-interface3] ip binding vpn-instance vpna

[SwitchB-Vsi-interface3] l3-vni 1000

[SwitchB-Vsi-interface3] pim sm

[SwitchB-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchB] multicast routing vpn-instance vpna

[SwitchB-mrib-vpna] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the MVXLAN source interface.

[SwitchB] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchB-mvxlan-vpna] address-family ipv4

[SwitchB-mvxlan-vpna-ipv4] source loopback 0

[SwitchB-mvxlan-vpna-ipv4] quit

[SwitchB-mvxlan-vpna] quit

# Configure Loopback 1.

[SwitchB] interface loopback 1

[SwitchB-LoopBack1] ip binding vpn-instance vpna

[SwitchB-LoopBack1] ip address 12.12.12.12 32

[SwitchB-LoopBack1] pim sm

[SwitchB-LoopBack1] quit

# Enter VPN instance PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchB] pim vpn-instance vpna

[SwitchB-pim-vpna] c-bsr 12.12.12.12

[SwitchB-pim-vpna] c-rp 12.12.12.12

[SwitchB-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchB] vsi vpna

[SwitchB-vsi-vpna] gateway vsi-interface 1

[SwitchB-vsi-vpna] quit

# Specify VSI-interface 2 as the gateway interface for VSI vpnb.

[SwitchB] vsi vpnb

[SwitchB-vsi-vpnb] gateway vsi-interface 2

[SwitchB-vsi-vpnb] quit

6. Configure Switch C:

# Enable L2VPN and IP multicast routing.

<SwitchC> system-view

[SwitchC] l2vpn enable

[SwitchC] multicast routing

[SwitchC-mrib] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchC] vxlan tunnel mac-learning disable

[SwitchC] vxlan tunnel arp-learning disable

# Create VLAN-interface 13 and enter its view.

[SwitchC] vlan 13

[SwitchC-vlan13] quit

[SwitchC] interface vlan-interface 13

# Enable PIM-SM on VLAN-interface 13.

[SwitchC-Vlan-interface13] pim sm

[SwitchC-Vlan-interface13] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchC] bgp 200

[SwitchC-bgp-default] peer 4.4.4.4 as-number 200

[SwitchC-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchC-bgp-default] address-family l2vpn evpn

[SwitchC-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchC-bgp-default-evpn] quit

[SwitchC-bgp-default] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchC] ip vpn-instance vpna

[SwitchC-vpn-instance-vpna] route-distinguisher 1:1

[SwitchC-vpn-instance-vpna] address-family ipv4

[SwitchC-vpn-ipv4-vpna] vpn-target 2:2

[SwitchC-vpn-ipv4-vpna] quit

[SwitchC-vpn-instance-vpna] address-family evpn

[SwitchC-vpn-evpn-vpna] vpn-target 1:1

[SwitchC-vpn-evpn-vpna] quit

[SwitchC-vpn-instance-vpna] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchC] interface vsi-interface 3

[SwitchC-Vsi-interface3] ip binding vpn-instance vpna

[SwitchC-Vsi-interface3] l3-vni 1000

[SwitchC-Vsi-interface3] pim sm

[SwitchC-Vsi-interface3] quit

# Enable IP multicast routing on VPN instance vpna.

[SwitchC] multicast routing vpn-instance vpna

[SwitchC-mrib-vpna] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the MVXLAN source interface.

[SwitchC] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchC-mvxlan-vpna] address-family ipv4

[SwitchC-mvxlan-vpna-ipv4] source loopback 0

[SwitchC-mvxlan-vpna-ipv4] quit

[SwitchC-mvxlan-vpna] quit

# Configure Loopback 1.

[SwitchC] interface loopback 1

[SwitchC-LoopBack1] ip binding vpn-instance vpna

[SwitchC-LoopBack1] ip address 12.12.12.12 32

[SwitchC-LoopBack1] pim sm

[SwitchC-LoopBack1] quit

# Enter VPN instance PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchC] pim vpn-instance vpna

[SwitchC-pim-vpna] c-bsr 12.12.12.12

[SwitchC-pim-vpna] c-rp 12.12.12.12

[SwitchC-pim-vpna] quit

# Configure a default route. Specify the next hop as 20.1.1.100, the IP address of a device in the Layer 3 network.

[SwitchC] ip route-static vpn-instance vpna 0.0.0.0 0 20.1.1.100

# Import the default route to the BGP IPv4 unicast routing table of VPN instance vpna.

[SwitchC] bgp 200

[SwitchC-bgp-default] ip vpn-instance vpna

[SwitchC-bgp-default-vpna] address-family ipv4 unicast

[SwitchC-bgp-default-ipv4-vpna] default-route imported

[SwitchC-bgp-default-ipv4-vpna] import-route static

[SwitchC-bgp-default-ipv4-vpna] quit

[SwitchC-bgp-default-vpna] quit

[SwitchC-bgp-default] quit

# Associate Twenty-FiveGigE 1/0/2 with VPN instance vpna.

[SwitchC] interface twenty-fivegige 1/0/2

[SwitchC-Twenty-FiveGigE1/0/2] ip binding vpn-instance vpna

[SwitchC-Twenty-FiveGigE1/0/2] ip address 20.1.1.3 24

[SwitchC-Twenty-FiveGigE1/0/2] pim sm

[SwitchC-Twenty-FiveGigE1/0/2] quit

7. Configure Switch D:

# Enable IP multicast routing.

<SwitchD> system-view

[SwitchD] multicast routing

[SwitchD-mrib] quit

# Enter PIM view, and configure Loopback 0 as a candidate-BSR and candidate-RP in the public network.

[SwitchD] pim

[SwitchD-pim] c-bsr 4.4.4.4

[SwitchD-pim] c-rp 4.4.4.4

[SwitchD-pim] quit

# Enable PIM-SM on VLAN-interface 11.

[SwitchD] interface vlan-interface11

[SwitchD-Vlan-interface11] pim sm

[SwitchD-Vlan-interface11] quit

# Enable PIM-SM on VLAN-interface 12.

[SwitchD] interface vlan-interface12

[SwitchD-Vlan-interface12] pim sm

[SwitchD-Vlan-interface12] quit

# Enable PIM-SM on VLAN-interface 13.

[SwitchD] interface vlan-interface13

[SwitchD-Vlan-interface13] pim sm

[SwitchD-Vlan-interface13] quit

# Establish BGP connections with other transport network switches.

[SwitchD] bgp 200

[SwitchD-bgp-default] group evpn

[SwitchD-bgp-default] peer 1.1.1.1 group evpn

[SwitchD-bgp-default] peer 2.2.2.2 group evpn

[SwitchD-bgp-default] peer 3.3.3.3 group evpn

[SwitchD-bgp-default] peer evpn as-number 200

[SwitchD-bgp-default] peer evpn connect-interface loopback 0

# Configure BGP to advertise BGP EVPN routes, and disable route target filtering of received BGP EVPN routes.

[SwitchD-bgp-default] address-family l2vpn evpn

[SwitchD-bgp-default-evpn] peer evpn enable

[SwitchD-bgp-default-evpn] undo policy vpn-target

# Configure Switch D as an RR.

[SwitchD-bgp-default-evpn] peer evpn reflect-client

[SwitchD-bgp-default-evpn] quit

[SwitchD-bgp-default] quit

Verifying the configuration

1. Verify the multicast routing information on Switch A:

# Verify that Switch A has multicast routing entries for VPN instance vpna.

<SwitchA> display pim vpn-instance vpna routing-table

Total 1 (*, G) entries; 1 (S, G) entries

(*, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: WC RC

UpTime: 02:57:31

Upstream interface: Register-Tunnel0

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: MTunnel0

Protocol: MD, UpTime: 02:57:31, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: SPT 2MSDP LOC ACT SQ RC 2MVPN

UpTime: 04:44:08

Upstream interface: Vsi-interface1

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: MTunnel1

Protocol: MD, UpTime: 02:00:27, Expires: -

# Verify that Switch A has multicast routing entries for the public network.

<SwitchA> display pim routing-table

Total 0 (*, G) entries; 2 (S, G) entries

(1.1.1.1, 236.0.0.1)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 02:09:52

Upstream interface: MTunnel0 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vlan-interface11

Protocol: pim-sm, UpTime: 01:16:34, Expires: 00:03:10

(1.1.1.1, 239.0.1.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 02:08:52

Upstream interface: MTunnel1 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vlan-interface11

Protocol: pim-sm, UpTime: 01:15:34, Expires: 00:03:11

2. Verify the multicast routing information on Switch B:

# Verify that Switch B has multicast routing entries for VPN instance vpna.

<SwitchB> display pim vpn-instance vpna routing-table

Total 1 (*, G) entries; 1 (S, G) entries

(*, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: WC

UpTime: 05:04:06

Upstream interface: Register-Tunnel0

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vsi-interface1

Protocol: igmp, UpTime: 05:04:06, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: SPT ACT RQ FRTNL

UpTime: 01:57:12

Upstream interface: Multicast-UPE0 (0.0.0.0)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vsi-interface1

Protocol: pim-sm, UpTime: 01:57:12, Expires: -

# Verify that Switch B has multicast routing entries for the public network.

<SwitchB> display pim routing-table

Total 0 (*, G) entries; 2 (S, G) entries

(1.1.1.1, 236.0.0.1)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT

UpTime: 01:59:46

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.4

RPF prime neighbor: 12.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: Multicast-UPE0

Protocol: MD, UpTime: 01:59:46, Expires: -

(1.1.1.1, 239.0.1.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT ACT

UpTime: 01:58:46

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.4

RPF prime neighbor: 12.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: Multicast-UPE0

Protocol: MD, UpTime: 01:58:46, Expires: -

Example: Configuring MVXLAN Layer 3 multicast forwarding for public-VPN and VPN-VPN intercommunication

Network configuration

As shown in Figure 6, VM 1 is the multicast source and the other VMs are multicast receivers. VM 1 belongs to VXLAN 10 in VPN instance vpna. VM 2 belongs to VXLAN 20 in VPN instance vpnb. VM 3 belongs to VXLAN 30 in the public network.

· Configure VXLAN 10, VXLAN 20, and VXLAN 30 on Switch A, Switch B, and Switch C, respectively, to extend VLAN 1, VLAN 2, and VLAN 3 across the sites.

· Configure Switch A, Switch B, and Switch C as distributed EVPN gateways to provide gateway services.

· Configure Switch D as an RR to reflect BGP EVPN routes between Switch A, Switch B, and Switch C.

· Configure MVXLAN and public-private intercommunication to ensure that VM 1 and VM 2 can reach each other and VM 1 and VM 3 can reach each other.

Figure 6 Network diagram

‌

Software version and feature compatibility

This example is supported only in Release 6635 and later.

Procedure

1. Set the hardware resource mode of Switch A, Switch B, and Switch C. This step uses Switch A as an example.

<SwitchA> system-view

[SwitchA] hardware-resource vxlan l3gw

Do you want to change the specified hardware resource working mode? [Y/N]:y

The hardware resource working mode is changed, please save the configuration and

reboot the system to make it effective.

[SwitchA] quit

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait..

.......DONE!

Current configuration may be lost after the reboot, save current configuration?

[Y/N]:y

This command will reboot the device. Continue? [Y/N]:y

2. On VM 1, specify 10.1.1.1 as the gateway address. On VM 2, specify 10.1.2.1 as the gateway address. On VM 3, specify 10.1.3.1 as the gateway address. (Details not shown.)

3. Configure IP addresses and unicast routing settings:

# Assign IP addresses to interfaces, as shown in Figure 6. (Details not shown.)

# Configure OSPF on all transport network switches (Switches A through D) for them to reach one another. (Details not shown.)

4. Configure Switch A:

# Enable L2VPN and IP multicast routing.

<SwitchA> system-view

[SwitchA] l2vpn enable

[SwitchA] multicast routing

[SwitchA-mrib] quit

# Enable the IGMP snooping feature.

[SwitchA] igmp-snooping

[SwitchA-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchA] vxlan tunnel mac-learning disable

[SwitchA] vxlan tunnel arp-learning disable

# Create VLAN-interface 11 and enter its view.

[SwitchA] vlan 11

[SwitchA-vlan11] quit

[SwitchA] interface vlan-interface 11

# Enable PIM-SM on VLAN-interface 11.

[SwitchA-Vlan-interface11] pim sm

[SwitchA-Vlan-interface11] quit

# Create an EVPN instance on VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] evpn encapsulation vxlan

[SwitchA-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchA-vsi-vpna] igmp-snooping enable

[SwitchA-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchA-vsi-vpna] vxlan 10

[SwitchA-vsi-vpna-vxlan-10] quit

[SwitchA-vsi-vpna] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchA] bgp 200

[SwitchA-bgp-default] peer 4.4.4.4 as-number 200

[SwitchA-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchA-bgp-default] address-family l2vpn evpn

[SwitchA-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchA-bgp-default-evpn] quit

[SwitchA-bgp-default] quit

# On site-facing interface Twenty-FiveGigE 1/0/1, create Ethernet service instance 1000 to match VLAN 1.

[SwitchA] interface twenty-fivegige 1/0/1

[SwitchA-Twenty-FiveGigE1/0/1] service-instance 1000

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] encapsulation s-vid 1

# Map Ethernet service instance 1000 to VSI vpna.

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] xconnect vsi vpna

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] quit

[SwitchA-Twenty-FiveGigE1/0/1] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchA] ip vpn-instance vpna

[SwitchA-vpn-instance-vpna] route-distinguisher 1:1

[SwitchA-vpn-instance-vpna] address-family ipv4

[SwitchA-vpn-ipv4-vpna] vpn-target 2:2

[SwitchA-vpn-ipv4-vpna] quit

[SwitchA-vpn-instance-vpna] address-family evpn

[SwitchA-vpn-evpn-vpna] vpn-target 1:1

[SwitchA-vpn-evpn-vpna] quit

[SwitchA-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchA] interface vsi-interface 1

[SwitchA-Vsi-interface1] ip binding vpn-instance vpna

[SwitchA-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchA-Vsi-interface1] pim sm

[SwitchA-Vsi-interface1] pim distributed-dr

[SwitchA-Vsi-interface1] mac-address 1-1-1

[SwitchA-Vsi-interface1] distributed-gateway local

[SwitchA-Vsi-interface1] local-proxy-arp enable

[SwitchA-Vsi-interface1] quit

# Associate VSI-interface 2 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchA] interface vsi-interface 2

[SwitchA-Vsi-interface2] ip binding vpn-instance vpna

[SwitchA-Vsi-interface2] l3-vni 1000

[SwitchA-Vsi-interface2] pim sm

[SwitchA-Vsi-interface2] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchA] multicast routing vpn-instance vpna

[SwitchA-mrib-vpna] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchA] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchA-mvxlan-vpna] address-family ipv4

[SwitchA-mvxlan-vpna-ipv4] default-group 236.2.0.0

[SwitchA-mvxlan-vpna-ipv4] source loopback 0

[SwitchA-mvxlan-vpna-ipv4] data-group 239.2.0.0 24

[SwitchA-mvxlan-vpna-ipv4] quit

[SwitchA-mvxlan-vpna] quit

# Create and configure Loopback 1.

[SwitchA] interface loopback 1

[SwitchA-LoopBack1] ip binding vpn-instance vpna

[SwitchA-LoopBack1] ip address 11.11.11.11 32

[SwitchA-LoopBack1] pim sm

[SwitchA-LoopBack1] quit

# Enter VPN instance PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchA] pim vpn-instance vpna

[SwitchA-pim-vpna] c-bsr 11.11.11.11

[SwitchA-pim-vpna] c-rp 11.11.11.11

[SwitchA-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] gateway vsi-interface 1

[SwitchA-vsi-vpna] quit

5. Configure Switch B:

# Enable L2VPN and IP multicast routing.

<SwitchB> system-view

[SwitchB] l2vpn enable

[SwitchB] multicast routing

[SwitchB-mrib] quit

# Enable the IGMP snooping feature.

[SwitchB] igmp-snooping

[SwitchB-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchB] vxlan tunnel mac-learning disable

[SwitchB] vxlan tunnel arp-learning disable

# Create VLAN-interface 12 and enter its view.

[SwitchB] vlan 12

[SwitchB-vlan12] quit

[SwitchB] interface vlan-interface 12

# Enable PIM-SM on VLAN-interface 12.

[SwitchB-Vlan-interface12] pim sm

[SwitchB-Vlan-interface12] quit

# Create an EVPN instance on VSI vpnb.

[SwitchB] vsi vpnb

[SwitchB-vsi-vpnb] evpn encapsulation vxlan

[SwitchB-vsi-vpnb-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpnb.

[SwitchB-vsi-vpnb] igmp-snooping enable

[SwitchB-vsi-vpnb] igmp-snooping proxy enable

# Create VXLAN 20.

[SwitchB-vsi-vpnb] vxlan 20

[SwitchB-vsi-vpnb-vxlan-20] quit

[SwitchB-vsi-vpnb] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchB] bgp 200

[SwitchB-bgp-default] peer 4.4.4.4 as-number 200

[SwitchB-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchB-bgp-default] address-family l2vpn evpn

[SwitchB-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchB-bgp-default-evpn] quit

[SwitchB-bgp-default] quit

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 1000 to match VLAN 2.

[SwitchB] interface twenty-fivegige 1/0/1

[SwitchB-Twenty-FiveGigE1/0/1] service-instance 1000

[SwitchB-Twenty-FiveGigE1/0/1-srv1000] encapsulation s-vid 2

# Map Ethernet service instance 1000 to VSI vpnb.

[SwitchB-Twenty-FiveGigE1/0/1-srv1000] xconnect vsi vpnb

[SwitchB-Twenty-FiveGigE1/0/1-srv1000] quit

[SwitchB-Twenty-FiveGigE1/0/1] quit

# Configure RD and route target settings for VPN instance vpnb.

[SwitchB] ip vpn-instance vpnb

[SwitchB-vpn-instance-vpnb] route-distinguisher 1:1

[SwitchB-vpn-instance-vpnb] address-family ipv4

[SwitchB-vpn-ipv4-vpnb] vpn-target 2:2

[SwitchB-vpn-ipv4-vpnb] quit

[SwitchB-vpn-instance-vpnb] address-family evpn

[SwitchB-vpn-evpn-vpnb] vpn-target 1:1

[SwitchB-vpn-evpn-vpnb] quit

[SwitchB-vpn-instance-vpnb] quit

#Configure VSI-interface 1.

[SwitchB] interface vsi-interface 1

[SwitchB-Vsi-interface1] ip binding vpn-instance vpnb

[SwitchB-Vsi-interface1] ip address 10.1.2.1 255.255.255.0

[SwitchB-Vsi-interface1] igmp enable

[SwitchB-Vsi-interface1] mac-address 2-2-2

[SwitchB-Vsi-interface1] distributed-gateway local

[SwitchB-Vsi-interface1] local-proxy-arp enable

[SwitchB-Vsi-interface1] quit

# Create VSI-interface 2, and configure the L3 VXLAN ID as 1000 on the interface for matching traffic from Switch A.

[SwitchB] interface vsi-interface 2

[SwitchB-Vsi-interface2] l3-vni 1000

[SwitchB-Vsi-interface2] pim sm

[SwitchB-Vsi-interface2] quit

# Create and configure Loopback 1.

[SwitchB] interface loopback 1

[SwitchB-LoopBack1] ip binding vpn-instance vpnb

[SwitchB-LoopBack1] ip address 22.22.22.22 32

[SwitchB-LoopBack1] pim sm

[SwitchB-LoopBack1] quit

# Enable IP multicast routing for VPN instance vpnb and import the traffic of the public network to VPN instance vpnb.

[SwitchB] multicast routing vpn-instance vpnb

[SwitchB-mrib-vpnb] multicast extranet select-rpf source 10.1.1.0 24

[SwitchB-mrib-vpnb] multicast extranet select-rpf source 22.22.22.0 24

[SwitchB-mrib-vpnb] quit

# Create an MDT-based MVXLAN for VPN instance vpnb and enter MVXLAN IPv4 address family view. Configure the MVXLAN source interface.

[SwitchB] multicast-vpn vxlan vpn-instance vpnb mode mdt

[SwitchB-mvxlan-vpnb] address-family ipv4

[SwitchB-mvxlan-vpnb-ipv4] source loopback 0

[SwitchB-mvxlan-vpnb-ipv4] quit

[SwitchB-mvxlan-vpnb] quit

# Enter VPN instance PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in VPN instance vpnb.

[SwitchB] pim vpn-instance vpnb

[SwitchB-pim-vpnb] c-bsr 22.22.22.22

[SwitchB-pim-vpnb] c-rp 22.22.22.22

[SwitchB-pim-vpnb] quit

# Create and configure Loopback 2.

[SwitchB] interface loopback 2

[SwitchB-LoopBack2] ip address 23.23.23.23 32

[SwitchB-LoopBack2] pim sm

[SwitchB-LoopBack2] quit

# Create an IPv4 basic ACL numbered 2000 and enter its view. Configure the ACL to permit only packets from 225.0.0.0/8.

[SwitchB] acl basic 2000

[SwitchB-acl-ipv4-basic-2000] rule permit source 225.0.0.0 0.255.255.255

[SwitchB-acl-ipv4-basic-2000] quit

# Enter public network PIM view, and configure Loopback 2 as a candidate-RP in the public network.

[SwitchB] pim

[SwitchB-pim] c-rp 23.23.23.23 group-policy 2000

[SwitchB-pim] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpnb.

[SwitchB] vsi vpnb

[SwitchB-vsi-vpnb] gateway vsi-interface 1

[SwitchB-vsi-vpnb] quit

6. Configure Switch C:

# Enable L2VPN and IP multicast routing.

<SwitchC> system-view

[SwitchC] l2vpn enable

[SwitchC] multicast routing

[SwitchC-mrib] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchC] vxlan tunnel mac-learning disable

[SwitchC] vxlan tunnel arp-learning disable

# Create VLAN-interface 13 and enter its view.

[SwitchC] vlan 13

[SwitchC-vlan13] quit

[SwitchC] interface vlan-interface 13

# Enable PIM-SM on VLAN-interface 13.

[SwitchC-Vlan-interface13] pim sm

[SwitchC-Vlan-interface13] quit

# Create an EVPN instance on VSI vpnc.

[SwitchC] vsi vpnc

[SwitchC-vsi-vpnc] evpn encapsulation vxlan

[SwitchC-vsi-vpnc-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpnc.

[SwitchC-vsi-vpnc] igmp-snooping enable

[SwitchC-vsi-vpnc] igmp-snooping proxy enable

# Create VXLAN 30.

[SwitchC-vsi-vpnc] vxlan 30

[SwitchC-vsi-vpnc-vxlan-30] quit

[SwitchC-vsi-vpnc] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchC] bgp 200

[SwitchC-bgp-default] peer 4.4.4.4 as-number 200

[SwitchC-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchC-bgp-default] address-family l2vpn evpn

[SwitchC-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchC-bgp-default-evpn] quit

[SwitchC-bgp-default] quit

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 1000 to match VLAN 3.

[SwitchC] interface twenty-fivegige 1/0/1

[SwitchC-Twenty-FiveGigE1/0/1] service-instance 1000

[SwitchC-Twenty-FiveGigE1/0/1-srv1000] encapsulation s-vid 3

# Map Ethernet service instance 1000 to VSI vpnc.

[SwitchC-Twenty-FiveGigE1/0/1-srv1000] xconnect vsi vpnc

[SwitchC-Twenty-FiveGigE1/0/1-srv1000] quit

[SwitchC-Twenty-FiveGigE1/0/1] quit

# Configure RD and route target settings for the public instance.

[SwitchC] ip public-instance

[SwitchC-public-instance] route-distinguisher 1:1

[SwitchC-public-instance] address-family ipv4

[SwitchC-public-instance-ipv4] vpn-target 2:2

[SwitchC-public-instance-ipv4] quit

[SwitchC-vpn-instance] address-family evpn

[SwitchC-public-instance-evpn] vpn-target 1:1

[SwitchC-public-instance-evpn] quit

[SwitchC-public-instance] quit

# Create an MDT-based MVXLAN for the public instance and enter MVXLAN IPv4 address family view. Configure the MVXLAN source interface.

[SwitchC] multicast-vpn vxlan public-instance mode mdt

[SwitchC-mvxlan-public-instance] address-family ipv4

[SwitchC-mvxlan-public-instance-ipv4] source loopback 0

[SwitchC-mvxlan-public-instance-ipv4] quit

[SwitchC-mvxlan-public-instance] quit

# Configure VSI-interface 1.

[SwitchC] interface vsi-interface 1

[SwitchC-Vsi-interface1] pim distributed-dr

[SwitchC-Vsi-interface1] ip address 10.1.3.1 255.255.255.0

[SwitchC-Vsi-interface1] igmp enable

[SwitchC-Vsi-interface1] mac-address 3-3-3

[SwitchC-Vsi-interface1] distributed-gateway local

[SwitchC-Vsi-interface1] local-proxy-arp enable

[SwitchC-Vsi-interface1] quit

# Create VSI-interface 2, and configure the L3 VXLAN ID as 1000 on the interface for matching traffic from Switch A.

[SwitchC] interface vsi-interface 2

[SwitchC-Vsi-interface3] l3-vni 1000

[SwitchC-Vsi-interface3] pim sm

[SwitchC-Vsi-interface3] quit

# Create and configure Loopback 1.

[SwitchC] interface loopback 1

[SwitchC-LoopBack1] ip address 33.33.33.33 32

[SwitchC-LoopBack1] pim sm

[SwitchC-LoopBack1] quit

# Create an IPv4 basic ACL numbered 2000 and enter its view. Configure the ACL to permit only packets from 225.0.0.0/8.

[SwitchC] acl basic 2000

[SwitchC-acl-ipv4-basic-2000] rule permit source 225.0.0.0 0.255.255.255

[SwitchC-acl-ipv4-basic-2000] quit

# Enter public network PIM view, and configure Loopback 1 as a candidate-RP in the public network.

[SwitchC] pim

[SwitchC-pim] c-rp 33.33.33.33 group-policy 2000

[SwitchC-pim] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpnc.

[SwitchC] vsi vpnc

[SwitchC-vsi-vpnc] gateway vsi-interface 1

[SwitchC-vsi-vpnc] quit

7. Configure Switch D:

# Enable IP multicast routing.

<SwitchD> system-view

[SwitchD] multicast routing

[SwitchD-mrib] quit

# Enter public network PIM view, and configure Loopback 0 as a candidate-BSR and candidate-RP in the underlay public network.

[SwitchD] pim

[SwitchD-pim] c-bsr 4.4.4.4

[SwitchD-pim] c-rp 4.4.4.4

[SwitchD] quit

# Enable PIM-SM on VLAN-interface 11.

[SwitchD] interface vlan-interface11

[SwitchD-Vlan-interface11] pim sm

[SwitchD-Vlan-interface11] quit

# Enable PIM-SM on VLAN-interface 12.

[SwitchD] interface vlan-interface12

[SwitchD-Vlan-interface12] pim sm

[SwitchD-Vlan-interface12] quit

# Enable PIM-SM on VLAN-interface 13.

[SwitchD] interface vlan-interface13

[SwitchD-Vlan-interface13] pim sm

[SwitchD-Vlan-interface13] quit

# Configure Switch D to establish BGP connections with other transport network switches.

[SwitchD] bgp 200

[SwitchD-bgp-default] group evpn

[SwitchD-bgp-default] peer 1.1.1.1 group evpn

[SwitchD-bgp-default] peer 2.2.2.2 group evpn

[SwitchD-bgp-default] peer 3.3.3.3 group evpn

[SwitchD-bgp-default] peer evpn as-number 200

[SwitchD-bgp-default] peer evpn connect-interface loopback 0

# Configure BGP to advertise BGP EVPN routes, and disable route target filtering of received BGP EVPN routes.

[SwitchD-bgp-default] address-family l2vpn evpn

[SwitchD-bgp-default-evpn] peer evpn enable

[SwitchD-bgp-default-evpn] undo policy vpn-target

# Configure Switch D as an RR.

[SwitchD-bgp-default-evpn] peer evpn reflect-client

[SwitchD-bgp-default-evpn] quit

[SwitchD-bgp-default] quit

Verifying the configuration

1. Verify the multicast routing information on Switch A:

# Verify that Switch A has multicast routing entries for the public network.

<SwitchA> display pim routing-table

Total 0 (*, G) entries; 2 (S, G) entries

(1.1.1.1, 236.0.0.1)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 02:09:52

Upstream interface: MTunnel0 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vlan-interface11

Protocol: pim-sm, UpTime: 01:16:34, Expires: 00:03:08

(1.1.1.1, 239.2.0.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 02:08:52

Upstream interface: MTunnel1 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vlan-interface11

Protocol: pim-sm, UpTime: 01:15:34, Expires: 00:03:11

# Verify that Switch A has multicast routing entries for VPN instance vpna.

<SwitchA> display pim vpn-instance vpna routing-table

Total 1 (*, G) entries; 1 (S, G) entries

(*, 225.0.0.0)

RP: 11.11.11.11 (local)

Protocol: pim-sm, Flag: WC RC

UpTime: 02:57:31

Upstream interface: Register-Tunnel0

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: MTunnel0

Protocol: MD, UpTime: 02:57:31, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 11.11.11.11 (local)

Protocol: pim-sm, Flag: SPT 2MSDP LOC ACT SQ RC 2MVPN

UpTime: 04:44:08

Upstream interface: Vsi-interface1

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: MTunnel1

Protocol: MD, UpTime: 02:00:27, Expires: -

2. Verify the multicast routing information on Switch B:

# Verify that Switch B has multicast routing entries for the public network.

<SwitchB> display pim routing-table

Total 1 (*, G) entries; 3 (S, G) entries

(*, 225.0.0.0)

RP: 22.22.22.22 (local)

Protocol: pim-sm, Flag: WC

UpTime: 00:01:24

Upstream interface: Register-Tunnel0

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Extranet (VPN: vpnb)

Protocol: MD, UpTime: 00:01:32, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 22.22.22.22 (local)

Protocol: pim-sm, Flag: SPT ACT 2MVPN FRTNL

UpTime: 00:00:39

Upstream interface: Multicast-UPE0 (0.0.0.0)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Extranet (VPN: vpnb)

Protocol: MD, UpTime: 00:01:32, Expires: -

(1.1.1.1, 236.2.0.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT

UpTime: 01:58:46

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.4

RPF prime neighbor: 12.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: Multicast-UPE0

Protocol: MD, UpTime: 01:59:16, Expires: -

(1.1.1.1, 239.2.0.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT ACT

UpTime: 01:58:46

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.4

RPF prime neighbor: 12.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: Multicast-UPE0

Protocol: MD, UpTime: 01:58:46, Expires: -

# Verify that Switch B has multicast routing entries for VPN instance vpnb.

<SwitchB> display pim vpn-instance vpnb routing-table

Total 1 (*, G) entries; 1 (S, G) entries

(*, 225.0.0.0)

RP: 22.22.22.22 (local)

Protocol: pim-sm, Flag: WC

UpTime: 00:01:24

Upstream interface: Extranet (VPN: public net)

Upstream neighbor: 127.0.0.1

RPF prime neighbor: 127.0.0.1

Downstream interface information:

Total number of downstream interfaces: 1

1: Vsi-interface1

Protocol: igmp, UpTime: 00:01:24, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 22.22.22.22 (local)

Protocol: pim-sm, Flag: SPT ACT 2MVPN FRTNL

UpTime: 00:00:39

Upstream interface: Extranet (VPN: public net)

Upstream neighbor: 127.0.0.1

RPF prime neighbor: 127.0.0.1

Downstream interface information:

Total number of downstream interfaces: 1

1: Vsi-interface1

Protocol: pim-sm, UpTime: 00:00:39, Expires: -

3. Verify the multicast routing information on Switch C:

# Verify that Switch C has multicast routing entries for the public network.

<SwitchC> display pim routing-table

Total 1 (*, G) entries; 3 (S, G) entries

(*, 225.0.0.0)

RP: 33.33.33.33 (local)

Protocol: pim-sm, Flag: WC

UpTime: 00:01:13

Upstream interface: Register-Tunnel0

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vsi-interface1

Protocol: igmp, UpTime: 00:01:13, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 33.33.33.33 (local)

Protocol: pim-sm, Flag: SPT ACT RQ FRTNL

UpTime: 00:00:52

Upstream interface: Multicast-UPE0 (0.0.0.0)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vsi-interface1

Protocol: pim-sm, UpTime: 00:00:52, Expires: -

(1.1.1.1, 236.2.0.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT

UpTime: 00:00:30

Upstream interface: Vlan-interface13

Upstream neighbor: 13.1.1.4

RPF prime neighbor: 13.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: Multicast-UPE0

Protocol: MD, UpTime: 01:59:16, Expires: -

(1.1.1.1, 239.2.0.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT ACT

UpTime: 00:00:30

Upstream interface: Vlan-interface13

Upstream neighbor: 13.1.1.4

RPF prime neighbor: 13.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: Multicast-UPE0

Protocol: MD, UpTime: 01:58:56, Expires: -

Example: Configuring MVXLAN extranet with receivers on both VPNs and the public network

Network configuration

As shown in Figure 7, VM 1 is the multicast source of multicast group 225.0.0.0, and the other VMs are multicast receivers. VM 1 and VM 2 belong to VPN instance vpna, VM 3 belongs to the public instance, and VM 4 belongs to VPN instance vpnb. VM 1 and VM 3 are in VXLAN 10, and VM 2 and VM 4 are in VXLAN 20. Configure MVXLAN to forward the multicast traffic from the source to the receivers.

· Configure VXLAN 10 and VXLAN 20 on Switch A and Switch B to extend VLAN 2 and VLAN 3 across the sites.

· Configure Switch A and Switch B as distributed EVPN gateways to provide gateway services. Configure Switch C as a border gateway to provide access to the connected Layer 3 network.

· Configure Switch D as an RR to reflect BGP EVPN routes among Switch A, Switch B, and Switch C.

· Configure PIM-SM on the transport-facing interfaces of Switches A through D. Configure IGMP snooping on Switches A through C for multicast forwarding entry creation.

· Configure MVXLAN extranet to import the traffic of VPN instance vpna to VPN instance vpnb and the public instance.

Figure 7 Network diagram

‌

Procedure

1. Set the hardware resource mode of Switch A, Switch B, and Switch C. This step uses Switch A as an example.

<SwitchA> system-view

[SwitchA] hardware-resource vxlan l3gw

Do you want to change the specified hardware resource working mode? [Y/N]:y

The hardware resource working mode is changed, please save the configuration and

reboot the system to make it effective.

[SwitchA] quit

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait..

.......DONE!

Current configuration may be lost after the reboot, save current configuration?

[Y/N]:y

This command will reboot the device. Continue? [Y/N]:y

2. On VM 1 and VM 2, specify 10.1.1.1 as the gateway address. On VM 3 and VM 4, specify 10.1.2.1 as the gateway address. (Details not shown.)

3. Configure IP addresses and unicast routing settings:

# Assign IP addresses to interfaces, as shown in Figure 7. (Details not shown.)

# Configure OSPF on all transport network switches (Switches A through D) for them to reach one another. (Details not shown.)

4. Set the hardware resource mode of Switch A, Switch B, and Switch C. This step uses Switch A as an example.

[SwitchA] hardware-resource vxlan l3gw

Do you want to change the specified hardware resource working mode? [Y/N]:y

The hardware resource working mode is changed, please save the configuration and

reboot the system to make it effective.

[SwitchA] quit

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait..

.......DONE!

Current configuration may be lost after the reboot, save current configuration?

[Y/N]:y

This command will reboot the device. Continue? [Y/N]:y

5. Configure Switch A:

# Enable L2VPN and IP multicast routing.

<SwitchA> system-view

[SwitchA] l2vpn enable

[SwitchA] multicast routing

[SwitchA-mrib] quit

# Enable the IGMP snooping feature.

[SwitchA] igmp-snooping

[SwitchA-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchA] vxlan tunnel mac-learning disable

[SwitchA] vxlan tunnel arp-learning disable

# Create VLAN-interface 11 and enter its view.

[SwitchA] vlan 11

[SwitchA-vlan11] quit

[SwitchA] interface vlan-interface 11

# Enable PIM-SM on VLAN-interface 11.

[SwitchA-Vlan-interface11] pim sm

[SwitchA-Vlan-interface11] quit

# Create an EVPN instance on VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] evpn encapsulation vxlan

[SwitchA-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchA-vsi-vpna-evpn-vxlan] vpn-target auto export-extcommunity

[SwitchA-vsi-vpna-evpn-vxlan] vpn-target auto import-extcommunity

[SwitchA-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchA-vsi-vpna] igmp-snooping enable

[SwitchA-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchA-vsi-vpna] vxlan 10

[SwitchA-vsi-vpna-vxlan-10] quit

[SwitchA-vsi-vpna] quit

# Create an EVPN instance on VSI vpnb.

[SwitchA] vsi vpnb

[SwitchA-vsi-vpnb] evpn encapsulation vxlan

[SwitchA-vsi-vpnb-evpn-vxlan] route-distinguisher auto

[SwitchA-vsi-vpnb-evpn-vxlan] vpn-target auto export-extcommunity

[SwitchA-vsi-vpnb-evpn-vxlan] vpn-target auto import-extcommunity

[SwitchA-vsi-vpnb-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpnb.

[SwitchA-vsi-vpnb] igmp-snooping enable

[SwitchA-vsi-vpnb] igmp-snooping proxy enable

# Create VXLAN 20.

[SwitchA-vsi-vpnb] vxlan 20

[SwitchA-vsi-vpnb-vxlan-20] quit

[SwitchA-vsi-vpnb] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchA] bgp 200

[SwitchA-bgp-default] peer 4.4.4.4 as-number 200

[SwitchA-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchA-bgp-default] address-family l2vpn evpn

[SwitchA-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchA-bgp-default-evpn] quit

[SwitchA-bgp-default] quit

# Create VLAN 2.

[SwitchA] vlan 2

[SwitchA-vlan2] quit

# Create VLAN 3.

[SwitchA] vlan 3

[SwitchA-vlan3] quit

# Configure Twenty-FiveGigE 1/0/1 as a trunk port and assign it to VLAN 2 and VLAN 3.

[SwitchA] interface twenty-fivegige 1/0/1

[SwitchA-Twenty-FiveGigE1/0/1] port link-type trunk

[SwitchA-Twenty-FiveGigE1/0/1] port trunk permit vlan 2 3

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 1000 to match VLAN 2.

[SwitchA-Twenty-FiveGigE1/0/1] service-instance 1000

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] encapsulation s-vid 2

# Map Ethernet service instance 1000 to VSI vpna.

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] xconnect vsi vpna

[SwitchA-Twenty-FiveGigE1/0/1-srv1000] quit

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 2000 to match VLAN 3.

[SwitchA-Twenty-FiveGigE1/0/1] service-instance 2000

[SwitchA-Twenty-FiveGigE1/0/1-srv2000] encapsulation s-vid 3

# Map Ethernet service instance 2000 to VSI vpnb.

[SwitchA-Twenty-FiveGigE1/0/1-srv2000] xconnect vsi vpnb

[SwitchA-Twenty-FiveGigE1/0/1-srv2000] quit

[SwitchA-Twenty-FiveGigE1/0/1] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchA] ip vpn-instance vpna

[SwitchA-vpn-instance-vpna] route-distinguisher 1:1

[SwitchA-vpn-instance-vpna] address-family ipv4

[SwitchA-vpn-ipv4-vpna] vpn-target 1:1

[SwitchA-vpn-ipv4-vpna] quit

[SwitchA-vpn-instance-vpna] address-family evpn

[SwitchA-vpn-evpn-vpna] vpn-target 1:1

[SwitchA-vpn-evpn-vpna] quit

[SwitchA-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchA] interface vsi-interface 1

[SwitchA-Vsi-interface1] ip binding vpn-instance vpna

[SwitchA-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchA-Vsi-interface1] pim sm

[SwitchA-Vsi-interface1] pim distributed-dr

[SwitchA-Vsi-interface1] mac-address 1-1-1

[SwitchA-Vsi-interface1] distributed-gateway local

[SwitchA-Vsi-interface1] local-proxy-arp enable

[SwitchA-Vsi-interface1] quit

# Configure VSI-interface 2.

[SwitchA] interface vsi-interface 2

[SwitchA-Vsi-interface2] ip binding vpn-instance vpna

[SwitchA-Vsi-interface2] ip address 10.1.2.1 255.255.255.0

[SwitchA-Vsi-interface2] igmp enable

[SwitchA-Vsi-interface2] mac-address 2-2-2

[SwitchA-Vsi-interface2] distributed-gateway local

[SwitchA-Vsi-interface2] local-proxy-arp enable

[SwitchA-Vsi-interface2] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchA] interface vsi-interface 3

[SwitchA-Vsi-interface3] ip binding vpn-instance vpna

[SwitchA-Vsi-interface3] l3-vni 1000

[SwitchA-Vsi-interface3] pim sm

[SwitchA-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchA] multicast routing vpn-instance vpna

[SwitchA-mrib-vpna] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchA] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchA-mvxlan-vpna] address-family ipv4

[SwitchA-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchA-mvxlan-vpna-ipv4] source loopback 0

[SwitchA-mvxlan-vpna-ipv4] data-group 239.0.1.0 25

[SwitchA-mvxlan-vpna-ipv4] quit

[SwitchA-mvxlan-vpna] quit

# Configure Loopback 1.

[SwitchA] interface loopback 1

[SwitchA-LoopBack1] ip binding vpn-instance vpna

[SwitchA-LoopBack1] ip address 12.12.12.12 32

[SwitchA-LoopBack1] pim sm

[SwitchA-LoopBack1] quit

# Enter VPN instance PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchA] pim vpn-instance vpna

[SwitchA-pim-vpna] c-bsr 12.12.12.12

[SwitchA-pim-vpna] c-rp 12.12.12.12

[SwitchA-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] gateway vsi-interface 1

[SwitchA-vsi-vpna] quit

# Specify VSI-interface 2 as the gateway interface for VSI vpnb.

[SwitchA] vsi vpnb

[SwitchA-vsi-vpnb] gateway vsi-interface 2

[SwitchA-vsi-vpnb] quit

6. Configure Switch B:

# Enable L2VPN and IP multicast routing.

<SwitchB> system-view

[SwitchB] l2vpn enable

[SwitchB] multicast routing

[SwitchB-mrib] quit

# Enable the IGMP snooping feature.

[SwitchB] igmp-snooping

[SwitchB-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchB] vxlan tunnel mac-learning disable

[SwitchB] vxlan tunnel arp-learning disable

# Create VLAN-interface 12 and enter its view.

[SwitchB] vlan 12

[SwitchB-vlan12] quit

[SwitchB] interface vlan-interface 12

# Enable PIM-SM on VLAN-interface 12.

[SwitchB-Vlan-interface12] pim sm

[SwitchB-Vlan-interface12] quit

# Create an EVPN instance on VSI vpna.

[SwitchB] vsi vpna

[SwitchB-vsi-vpna] evpn encapsulation vxlan

[SwitchB-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchB-vsi-vpna-evpn-vxlan] vpn-target auto export-extcommunity

[SwitchB-vsi-vpna-evpn-vxlan] vpn-target auto import-extcommunity

[SwitchB-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchB-vsi-vpna] igmp-snooping enable

[SwitchB-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchB-vsi-vpna] vxlan 10

[SwitchB-vsi-vpna-vxlan-10] quit

[SwitchB-vsi-vpna] quit

# Create an EVPN instance on VSI vpnb.

[SwitchB] vsi vpnb

[SwitchB-vsi-vpnb] evpn encapsulation vxlan

[SwitchB-vsi-vpnb-evpn-vxlan] route-distinguisher auto

[SwitchB-vsi-vpnb-evpn-vxlan] vpn-target auto export-extcommunity

[SwitchB-vsi-vpnb-evpn-vxlan] vpn-target auto import-extcommunity

[SwitchB-vsi-vpnb-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpnb.

[SwitchB-vsi-vpnb] igmp-snooping enable

[SwitchB-vsi-vpnb] igmp-snooping proxy enable

# Create VXLAN 20.

[SwitchB-vsi-vpnb] vxlan 20

[SwitchB-vsi-vpnb-vxlan-20] quit

[SwitchB-vsi-vpnb] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchB] bgp 200

[SwitchB-bgp-default] peer 4.4.4.4 as-number 200

[SwitchB-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchB-bgp-default] address-family l2vpn evpn

[SwitchB-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchB-bgp-default-evpn] quit

[SwitchB-bgp-default] quit

# Create VLAN 2.

[SwitchB] vlan 2

[SwitchB-vlan2] quit

# Create VLAN 3.

[SwitchB] vlan 3

[SwitchB-vlan3] quit

# Configure Twenty-FiveGigE 1/0/1 as a trunk port and assign it to VLAN 2.

[SwitchB] interface twenty-fivegige 1/0/1

[SwitchB-Twenty-FiveGigE1/0/1] port link-type trunk

[SwitchB-Twenty-FiveGigE1/0/1] port trunk permit vlan 2

# On Twenty-FiveGigE 1/0/1, create Ethernet service instance 1000 to match VLAN 2.

[SwitchB] interface twenty-fivegige 1/0/1

[SwitchB-Twenty-FiveGigE1/0/1] service-instance 1000

[SwitchB-Twenty-FiveGigE1/0/1-srv1000]encapsulation s-vid 2

# Map Ethernet service instance 1000 to VSI vpna.

[SwitchB-Twenty-FiveGigE1/0/1-srv1000] xconnect vsi vpna

[SwitchB-Twenty-FiveGigE1/0/1-srv1000] quit

# Configure Twenty-FiveGigE 1/0/2 as a trunk port and assign it to VLAN 3.

[SwitchB] interface twenty-fivegige 1/0/2

[SwitchB-Twenty-FiveGigE1/0/2] port link-type trunk

[SwitchB-Twenty-FiveGigE1/0/2] port trunk permit vlan 3

# On Twenty-FiveGigE 1/0/2, create Ethernet service instance 2000 to match VLAN 3.

[SwitchB-Twenty-FiveGigE1/0/2] service-instance 2000

[SwitchB-Twenty-FiveGigE1/0/2-srv2000] encapsulation s-vid 3

# Map Ethernet service instance 2000 to VSI vpnb.

[SwitchB-Twenty-FiveGigE1/0/2-srv2000] xconnect vsi vpnb

[SwitchB-Twenty-FiveGigE1/0/2-srv2000] quit

[SwitchB-Twenty-FiveGigE1/0/2] quit

# Configure RD and route target settings for VPN instance vpnb.

[SwitchB] ip vpn-instance vpnb

[SwitchB-vpn-instance-vpnb] route-distinguisher 1:1

[SwitchB-vpn-instance-vpnb] address-family ipv4

[SwitchB-vpn-ipv4-vpnb] vpn-target 1:1

[SwitchB-vpn-ipv4-vpnb] quit

[SwitchB-vpn-instance-vpnb] address-family evpn

[SwitchB-vpn-evpn-vpnb] vpn-target 1:1

[SwitchB-vpn-evpn-vpnb] quit

[SwitchB-vpn-instance-vpnb] quit

# Configure RD and route target settings for the public instance.

[SwitchB] ip public-instance

[SwitchB-public-instance] route-distinguisher 2:2

[SwitchB-public-instance] address-family ipv4

[SwitchB-public-instance-ipv4] vpn-target 1:1

[SwitchB-public-instance-ipv4] quit

[SwitchB-public-instance] address-family evpn

[SwitchB-public-instance-evpn] vpn-target 1:1

[SwitchB-public-instance-evpn] quit

[SwitchB-public-instance] quit

# Configure VSI-interface 1.

[SwitchB] interface vsi-interface 1

[SwitchB-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchB-Vsi-interface1] igmp enable

[SwitchB-Vsi-interface1] mac-address 1-1-1

[SwitchB-Vsi-interface1] distributed-gateway local

[SwitchB-Vsi-interface1] local-proxy-arp enable

[SwitchB-Vsi-interface1] quit

# Configure VSI-interface 2.

[SwitchB] interface vsi-interface 2

[SwitchB-Vsi-interface2] ip binding vpn-instance vpnb

[SwitchB-Vsi-interface2] ip address 10.1.2.1 255.255.255.0

[SwitchB-Vsi-interface2] igmp enable

[SwitchB-Vsi-interface2] mac-address 2-2-2

[SwitchB-Vsi-interface2] distributed-gateway local

[SwitchB-Vsi-interface2] local-proxy-arp enable

[SwitchB-Vsi-interface2] quit

# Create VSI-interface 4 and configure its L3 VXLAN ID as 1000.

[SwitchB] interface vsi-interface 4

[SwitchB-Vsi-interface4] l3-vni 1000

[SwitchB-Vsi-interface4] pim sm

[SwitchB-Vsi-interface4] quit

# Enable IP multicast routing for VPN instance vpnb.

[SwitchB] multicast routing vpn-instance vpnb

[SwitchB-mrib-vpnb] quit

# Create an MDT-based MVXLAN for VPN instance vpnb, enter MVXLAN IPv4 address family view, and configure the MVXLAN source interface.

[SwitchB] multicast-vpn vxlan vpn-instance vpnb mode mdt

[SwitchB-mvxlan-vpnb] address-family ipv4

[SwitchB-mvxlan-vpnb-ipv4] source loopback 0

[SwitchB-mvxlan-vpnb-ipv4] quit

[SwitchB-mvxlan-vpnb] quit

# Configure Loopback 1.

[SwitchB] interface loopback 1

[SwitchB-LoopBack1] ip binding vpn-instance vpnb

[SwitchB-LoopBack1] ip address 12.12.12.12 32

[SwitchB-LoopBack1] pim sm

[SwitchB-LoopBack1] quit

# Enter VPN instance PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in VPN instance vpnb.

[SwitchB] pim vpn-instance vpnb

[SwitchB-pim-vpnb] c-bsr 12.12.12.12

[SwitchB-pim-vpnb] c-rp 12.12.12.12

[SwitchB-pim-vpnb] quit

# Configure Loopback 2.

[SwitchB] interface loopback 2

[SwitchB-LoopBack2] ip address 13.13.13.13 32

[SwitchB-LoopBack2] pim sm

[SwitchB-LoopBack2] quit

# Create IPv4 basic ACL 2000 and enter its view. Create a rule in the ACL to permit only packets from 225.0.0.0/8.

[SwitchB-acl-ipv4-basic-2000] acl basic 2000

[SwitchB-acl-ipv4-basic-2000] rule permit source 225.0.0.0 0.255.255.255

[SwitchB-acl-ipv4-basic-2000] quit

# Enter public instance PIM view, configure Loopback 2 as a candidate-BSR and candidate-RP in the public instance, and specify a candidate-RP policy.

[SwitchB] pim

[SwitchB-pim] c-bsr 13.13.13.13

[SwitchB-pim] c-rp 13.13.13.13 group-policy 2000

[SwitchB-pim] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchB] vsi vpna

[SwitchB-vsi-vpna] gateway vsi-interface 1

[SwitchB-vsi-vpna] quit

# Specify VSI-interface 2 as the gateway interface for VSI vpnb.

[SwitchB] vsi vpnb

[SwitchB-vsi-vpnb] gateway vsi-interface 2

[SwitchB-vsi-vpnb] quit

# Enable IP multicast routing for VPN instance vpnb, and import the traffic of VPN instance vpna to VPN instance vpnb.

[SwitchB] multicast routing vpn-instance vpnb

[SwitchB-mrib-vpnb] multicast extranet select-rpf group 225.0.0.0 16

7. Configure Switch C:

# Enable L2VPN and IP multicast routing.

<SwitchC> system-view

[SwitchC] l2vpn enable

[SwitchC] multicast routing

[SwitchC-mrib] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchC] vxlan tunnel mac-learning disable

[SwitchC] vxlan tunnel arp-learning disable

# Create VLAN-interface 13 and enter its view.

[SwitchC] vlan 13

[SwitchC-vlan13] quit

[SwitchC] interface vlan-interface 13

# Enable PIM-SM on VLAN-interface 13.

[SwitchC-Vlan-interface13] pim sm

[SwitchC-Vlan-interface13] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchC] bgp 200

[SwitchC-bgp-default] peer 4.4.4.4 as-number 200

[SwitchC-bgp-default] peer 4.4.4.4 connect-interface loopback 0

[SwitchC-bgp-default] address-family l2vpn evpn

[SwitchC-bgp-default-evpn] peer 4.4.4.4 enable

[SwitchC-bgp-default-evpn] quit

[SwitchC-bgp-default] quit

# Configure RD and route target settings for the public instance.

[SwitchC] ip public-instance

[SwitchC-public-instance] route-distinguisher 1:1

[SwitchC-public-instance] address-family ipv4

[SwitchC-public-instance] vpn-target 1:1

[SwitchC-public-instance] quit

[SwitchC-public-instance] address-family evpn

[SwitchC-public-instance] vpn-target 1:1

[SwitchC-public-instance] quit

# Configure the L3 VXLAN ID as 1000 for VSI-interface 3.

[SwitchC] interface vsi-interface 3

[SwitchC-Vsi-interface3] l3-vni 1000

[SwitchC-Vsi-interface3] pim sm

[SwitchC-Vsi-interface3] quit

# Create an MDT-based MVXLAN for the public instance, enter MVXLAN IPv4 address family view, and configure the MVXLAN source interface.

[SwitchC] multicast-vpn vxlan public-instance mode mdt

[SwitchC-mvxlan-public-instance] address-family ipv4

[SwitchC-mvxlan-public-instance-ipv4] source loopback 0

[SwitchC-mvxlan-public-instance-ipv4] quit

[SwitchC-mvxlan-public-instance] quit

# Configure Loopback 1.

[SwitchC] interface loopback 1

[SwitchC-LoopBack1] ip address 12.12.12.12 32

[SwitchC-LoopBack1] pim sm

[SwitchC-LoopBack1] quit

# Create IPv4 basic ACL 2000 and enter its view. Create a rule in the ACL to permit only packets from 225.0.0.0/8.

[SwitchC-acl-ipv4-basic-2000] acl basic 2000

[SwitchC-acl-ipv4-basic-2000] rule permit source 225.0.0.0 0.255.255.255

[SwitchC-acl-ipv4-basic-2000] qui

# Enter PIM view, and configure Loopback 1 as a candidate-BSR and candidate-RP in the public network.

[SwitchC] pim

[SwitchC-pim] c-bsr 12.12.12.12

[SwitchC-pim] c-rp 12.12.12.12 group-policy 2000

[SwitchC-pim] quit

# Configure a default route. Specify the next hop as 20.1.1.100, the IP address of a device in the Layer 3 network.

[SwitchC] ip route-static 0.0.0.0 0 20.1.1.100

# Import the default route to the BGP IPv4 unicast routing table of the public instance.

[SwitchC] bgp 200

[SwitchC-bgp-default] address-family ipv4 unicast

[SwitchC-bgp-default-ipv4] default-route imported

[SwitchC-bgp-default-ipv4] import-route static

[SwitchC-bgp-default-ipv4] quit

[SwitchC-bgp-default] quit

# Create VLAN 20.

[SwitchC] vlan 20

[SwitchC-vlan20] quit

# Configure VLAN-interface 20 that connects to the Layer 3 network and associate the interface with the public instance.

[SwitchC] interface vlan-interface 20

[SwitchC-Vlan-interface20] ip address 20.1.1.3 24

[SwitchC-Vlan-interface20] pim sm

[SwitchC-Vlan-interface20] quit

8. Configure Switch D:

# Enable IP multicast routing.

<SwitchD> system-view

[SwitchD] multicast routing

[SwitchD-mrib] quit

# Enter PIM view, and configure Loopback 0 as a candidate-BSR and candidate-RP in the public network.

[SwitchD] pim

[SwitchD-pim] c-bsr 4.4.4.4

[SwitchD-pim] c-rp 4.4.4.4

[SwitchD-pim] quit

# Enable PIM-SM on VLAN-interface 11.

[SwitchD] interface vlan-interface11

[SwitchD-Vlan-interface11] pim sm

[SwitchD-Vlan-interface11] quit

# Enable PIM-SM on VLAN-interface 12.

[SwitchD] interface vlan-interface12

[SwitchD-Vlan-interface12] pim sm

[SwitchD-Vlan-interface12] quit

# Enable PIM-SM on VLAN-interface 13.

[SwitchD] interface vlan-interface13

[SwitchD-Vlan-interface13] pim sm

[SwitchD-Vlan-interface13] quit

# Establish BGP connections with other transport network switches.

[SwitchD] bgp 200

[SwitchD-bgp-default] group evpn

[SwitchD-bgp-default] peer 1.1.1.1 group evpn

[SwitchD-bgp-default] peer 2.2.2.2 group evpn

[SwitchD-bgp-default] peer 3.3.3.3 group evpn

[SwitchD-bgp-default] peer evpn as-number 200

[SwitchD-bgp-default] peer evpn connect-interface loopback 0

# Configure BGP to advertise BGP EVPN routes, and disable route target filtering of received BGP EVPN routes.

[SwitchD-bgp-default] address-family l2vpn evpn

[SwitchD-bgp-default-evpn] peer evpn enable

[SwitchD-bgp-default-evpn] undo policy vpn-target

# Configure Switch D as an RR.

[SwitchD-bgp-default-evpn] peer evpn reflect-client

[SwitchD-bgp-default-evpn] quit

[SwitchD-bgp-default] quit

Verifying the configuration

1. Verify the multicast routing information on Switch A:

# Verify that Switch A has multicast routing entries for VPN instance vpna.

<SwitchA> display pim vpn-instance vpna routing-table

Total 1 (*, G) entries; 1 (S, G) entries

(*, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: WC RC

UpTime: 02:57:31

Upstream interface: Register-Tunnel0

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: MTunnel0

Protocol: MD, UpTime: 02:57:31, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: SPT 2MSDP LOC ACT SQ RC 2MVPN

UpTime: 02:56:31

Upstream interface: Vsi-interface1

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: MTunnel1

Protocol: MD, UpTime: 02:56:31, Expires: -

# Verify that Switch A has multicast routing entries for the public network.

<SwitchA> display pim routing-table

Total 0 (*, G) entries; 2 (S, G) entries

(1.1.1.1, 236.0.0.1)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 03:09:52

Upstream interface: MTunnel0 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vlan-interface11

Protocol: pim-sm, UpTime: 03:09:50, Expires: 00:03:10

(1.1.1.1, 239.0.1.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 02:55:31

Upstream interface: MTunnel1 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vlan-interface11

Protocol: pim-sm, UpTime: 02:55:28, Expires: 00:03:11

2. Verify the multicast routing information on Switch B:

# Verify that Switch B has multicast routing entries for VPN instance vpnb.

<SwitchB> display pim vpn-instance vpnb routing-table

Total 1 (*, G) entries; 1 (S, G) entries

(*, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: WC

UpTime: 02:56:35

Upstream interface: Extranet (public instance)

Upstream neighbor: 127.0.0.1

RPF prime neighbor: 127.0.0.1

Downstream interface information:

Total number of downstream interfaces: 11: Vsi-interface2

Protocol: igmp, UpTime: 02:56:35, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: SPT ACT RQ 2MVPN

UpTime: 02:56:31

Upstream interface: Extranet (public instance)

Upstream neighbor: 127.0.0.1

RPF prime neighbor: 127.0.0.1

Downstream interface information:

Total number of downstream interfaces: 1 1: Vsi-interface2

Protocol: igmp, UpTime: 02:56:31, Expires: -

# Verify that Switch B has multicast routing entries for the public network.

<SwitchB> display pim routing-table

Total 1 (*, G) entries; 3 (S, G) entries

(*, 225.0.0.0)

RP: 13.13.13.13 (local)

Protocol: pim-sm, Flag: WC

UpTime: 02:56:31

Upstream interface: Register-Tunnel0

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 2

1: Vsi-interface 1

Protocol: igmp, UpTime: 02:56:31, Expires: -

2: Extranet (VPN: vpnb)

Protocol: MD, UpTime: 02:56:31, Expires: -

(10.1.1.10, 225.0.0.0)

RP: 12.12.12.12 (local)

Protocol: pim-sm, Flag: SPT ACT RQ 2MVPN

UpTime: 02:56:30

Upstream interface: MVXLAN-UPE0 (0.0.0.0)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vsi-interface 1

Protocol: igmp, UpTime: 02:56:31, Expires: -

2: Extranet (VPN: vpnb)

Protocol: MD, UpTime: 02:56:31, Expires: -

(1.1.1.1, 236.0.0.1)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT

UpTime: 03:00:46

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.4

RPF prime neighbor: 12.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: MVXLAN-UPE0

Protocol: MD, UpTime: 03:00:46, Expires: -

(1.1.1.1, 239.0.1.0)

RP: 4.4.4.4

Protocol: pim-sm, Flag: SPT ACT 2MVPN

UpTime: 02:56:31

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.4

RPF prime neighbor: 12.1.1.4

Downstream interface information:

Total number of downstream interfaces: 1

1: MVXLAN-UPE0

Protocol: MD, UpTime: 02:56:31, Expires: -

Example: Configuring DRNI in MVXLAN with an Ethernet aggregate link as the IPL

Network configuration

As shown in Figure 8, set up DR systems as follows:

· Set up a DR system with distributed EVPN gateways Switch A and Switch B. The devices are attached to multicast source 1.

· Set up a DR system with distributed EVPN gateways Switch C and Switch D. The devices are attached to multicast receiver 1.

· Set up a DR system with border devices Switch E and Switch F. The devices are attached to multicast receiver 2. Configure the devices as RRs to reflect BGP EVPN routes.

· Configure an Ethernet aggregate link as the IPL for each DR system.

· Configure IGMP snooping on Switches A through F for multicast forwarding entry creation.

· Configure PIM-SM on the transport-facing interfaces of Switches A through F.

· Configure VXLAN 10 on the DR systems for the multicast receivers to receive multicast traffic from multicast source 1.

Figure 8 Network diagram

‌

Device	Interface	IP address	Device	Interface	IP address
Switch A	Loop0	1.1.1.1/32	Switch B	Loop0	2.2.2.2/32
	Loop1	1.2.3.4/32		Loop1	1.2.3.4/32
	Loop2	1.2.3.4/32		Loop2	1.2.3.4/32
	Vlan-int2	192.168.1.1/24		Vlan-int2	192.168.1.2/24
	Vlan-int3	30.1.1.1/24		Vlan-int5	50.1.1.2/24
	Vlan-int4	40.1.1.1/24		Vlan-int6	60.1.1.2/24
Switch C	Loop0	3.3.3.3/32	Switch D	Loop0	4.4.4.4/32
	Loop1	1.2.3.6/32		Loop1	1.2.3.6/32
	Loop2	1.2.3.6/32		Loop2	1.2.3.6/32
	Vlan-int7	70.1.1.3/24		Vlan-int9	90.1.1.4/24
	Vlan-int8	80.1.1.3/24		Vlan-int10	100.1.1.4/24
	Vlan-int12	192.168.3.1/24		Vlan-int12	192.168.3.2/24
Switch E	Loop0	5.5.5.5/32	Switch F	Loop0	6.6.6.6/32
	Loop1	1.2.3.5/32		Loop1	1.2.3.5/32
	Loop2	1.2.3.5/32		Loop2	1.2.3.5/32
	Vlan-int3	30.1.1.5/24		Vlan-int4	40.1.1.6/24
	Vlan-int5	50.1.1.5/24		Vlan-int6	60.1.1.6/24
	Vlan-int7	70.1.1.5/24		Vlan-int8	80.1.1.6/24
	Vlan-int9	90.1.1.5/24		Vlan-int10	100.1.1.6/24
	Vlan-int11	192.168.4.1/24		Vlan-int11	192.168.4.2/24

Software version and feature compatibility

This example is supported only in Release 6635 and later.

Procedure

1. Set the hardware resource mode of Switch A, Switch B, Switch C, Switch D, Switch E, and Switch F. This step uses Switch A as an example.

<SwitchA> system-view

[SwitchA] hardware-resource vxlan l3gw

Do you want to change the specified hardware resource working mode? [Y/N]:y

The hardware resource working mode is changed, please save the configuration and

reboot the system to make it effective.

[SwitchA] quit

<SwitchA> reboot

Start to check configuration with next startup configuration file, please wait..

.......DONE!

Current configuration may be lost after the reboot, save current configuration?

[Y/N]:y

This command will reboot the device. Continue? [Y/N]:y

2. Configure IP addresses and unicast routing settings:

# Assign IP addresses to interfaces, as shown in Figure 8. (Details not shown.)

# Configure OSPF on all transport network switches (Switches A through F) for them to reach one another. (Details not shown.)

3. Configure Switch A:

# Enable L2VPN.

<SwitchA> system-view

[SwitchA] l2vpn enable

# Specify the virtual VTEP address as 1.2.3.4.

[SwitchA] evpn drni group 1.2.3.4

# Specify the IP addresses of the member devices in the DR system.

[SwitchA] evpn drni local 1.1.1.1 remote 2.2.2.2

# Enable IP multicast routing.

[SwitchA] multicast routing

[SwitchA-mrib] quit

# Enable the IGMP snooping feature.

[SwitchA] igmp-snooping

[SwitchA-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchA] vxlan tunnel mac-learning disable

[SwitchA] vxlan tunnel arp-learning disable

# Create an EVPN instance on VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] evpn encapsulation vxlan

[SwitchA-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchA-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchA-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchA-vsi-vpna] igmp-snooping enable

[SwitchA-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchA-vsi-vpna] vxlan 10

[SwitchA-vsi-vpna-vxlan-10] quit

[SwitchA-vsi-vpna] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchA] bgp 200

[SwitchA-bgp-default] peer 5.5.5.5 as-number 200

[SwitchA-bgp-default] peer 5.5.5.5 connect-interface loopback 0

[SwitchA-bgp-default] peer 6.6.6.6 as-number 200

[SwitchA-bgp-default] peer 6.6.6.6 connect-interface loopback 0

[SwitchA-bgp-default] address-family l2vpn evpn

[SwitchA-bgp-default-evpn] peer 5.5.5.5 enable

[SwitchA-bgp-default-evpn] peer 6.6.6.6 enable

[SwitchA-bgp-default-evpn] quit

[SwitchA-bgp-default] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchA] ip vpn-instance vpna

[SwitchA-vpn-instance-vpna] route-distinguisher 1:1

[SwitchA-vpn-instance-vpna] address-family ipv4

[SwitchA-vpn-ipv4-vpna] vpn-target 2:2

[SwitchA-vpn-ipv4-vpna] quit

[SwitchA-vpn-instance-vpna] address-family evpn

[SwitchA-vpn-evpn-vpna] vpn-target 1:1

[SwitchA-vpn-evpn-vpna] quit

[SwitchA-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchA] interface vsi-interface 1

[SwitchA-Vsi-interface1] ip binding vpn-instance vpna

[SwitchA-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchA-Vsi-interface1] pim sm

[SwitchA-Vsi-interface1] igmp enable

[SwitchA-Vsi-interface1] pim distributed-dr

[SwitchA-Vsi-interface1] mac-address 1-1-1

[SwitchA-Vsi-interface1] distributed-gateway local

[SwitchA-Vsi-interface1] local-proxy-arp enable

[SwitchA-Vsi-interface1] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchA] interface vsi-interface 3

[SwitchA-Vsi-interface3] ip binding vpn-instance vpna

[SwitchA-Vsi-interface3] l3-vni 1000

[SwitchA-Vsi-interface3] pim sm

[SwitchA-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchA] multicast routing vpn-instance vpna

[SwitchA-mrib-vpna] quit

# Configure Loopback 0.

[SwitchA] interface loopback 0

[SwitchA-LoopBack0] ip address 1.1.1.1 32

[SwitchA-LoopBack0] pim sm

[SwitchA-LoopBack0] ospf 1 area 0

[SwitchA-LoopBack0] quit

# Configure Loopback 1.

[SwitchA] interface loopback 1

[SwitchA-LoopBack1] ip address 1.2.3.4 32

[SwitchA-LoopBack1] pim sm

[SwitchA-LoopBack1] ospf 1 area 0

[SwitchA-LoopBack1] quit

# Configure Loopback 2.

[SwitchA] interface loopback 2

[SwitchA-LoopBack2] ip binding vpn-instance vpna

[SwitchA-LoopBack2] ip address 1.2.3.4 32

[SwitchA-LoopBack2] pim sm

[SwitchA-LoopBack2] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchA] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchA-mvxlan-vpna] address-family ipv4

[SwitchA-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchA-mvxlan-vpna-ipv4] source loopback 1 evpn-drni-group

[SwitchA-mvxlan-vpna-ipv4] data-group 239.0.0.1 24

[SwitchA-mvxlan-vpna-ipv4] quit

[SwitchA-mvxlan-vpna] quit

# Enter VPN instance PIM view, and configure Loopback 2 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchA] pim vpn-instance vpna

[SwitchA-pim-vpna] c-bsr 1.2.3.4

[SwitchA-pim-vpna] c-rp 1.2.3.4

[SwitchA-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchA] vsi vpna

[SwitchA-vsi-vpna] gateway vsi-interface 1

[SwitchA-vsi-vpna] quit

# Configure a DR interface.

[SwitchA] interface bridge-aggregation 21

[SwitchA-Bridge-Aggregation21] port link-type trunk

[SwitchA-Bridge-Aggregation21] port trunk permit vlan 1 20 to 29 [SwitchA-Bridge-Aggregation21] link-aggregation mode dynamic

[SwitchA-Bridge-Aggregation21] port drni group 1

# Map Ethernet service instance 100 to VSI vpna.

[SwitchA-Bridge-Aggregation21] service-instance 100

[SwitchA-Bridge-Aggregation21-srv100] encapsulation s-vid 21

[SwitchA-Bridge-Aggregation21-srv100] xconnect vsi vpna

[SwitchA-Bridge-Aggregation21-srv100] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the DR interface.

[SwitchA] interface twenty-fivegige 1/0/1

[SwitchA-Twenty-FiveGigE1/0/1] port link-aggregation group 1

[SwitchA-Twenty-FiveGigE1/0/1] quit

# Configure an aggregate interface as the IPP.

[SwitchA] interface bridge-aggregation 9

[SwitchA-Bridge-Aggregation9] port link-type trunk

[SwitchA-Bridge-Aggregation9] port trunk permit vlan all

[SwitchA-Bridge-Aggregation9] link-aggregation mode dynamic

[SwitchA-Bridge-Aggregation9] port drni intra-portal-port 1

[SwitchA-Bridge-Aggregation9] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the IPP.

[SwitchA] interface twenty-fivegige 1/0/2

[SwitchA-Twenty-FiveGigE1/0/2] port link-aggregation group 9

[SwitchA-Twenty-FiveGigE1/0/2] quit

# Exclude the interface used for setting up the keepalive link from the shutdown action by DRNI MAD.

[SwitchA] drni mad exclude interface twenty-fivegige 1/0/3

# Configure DR system parameters.

[SwitchA] drni restore-delay 180

[SwitchA] drni system-mac 1-1-1

[SwitchA] drni system-number 1

[SwitchA] drni system-priority 10

[SwitchA] drni keepalive ip destination 192.168.1.2 source 192.168.1.1

4. Configure Switch B:

# Enable L2VPN.

<SwitchB> system-view

[SwitchB] l2vpn enable

# Specify the virtual VTEP address as 1.2.3.4.

[SwitchB] evpn drni group 1.2.3.4

# Specify the IP addresses of the member devices in the DR system.

[SwitchB] evpn drni local 2.2.2.2 remote 1.1.1.1

# Enable IP multicast routing.

[SwitchB] multicast routing

[SwitchB-mrib] quit

# Enable the IGMP snooping feature.

[SwitchB] igmp-snooping

[SwitchB-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchB] vxlan tunnel mac-learning disable

[SwitchB] vxlan tunnel arp-learning disable

# Create an EVPN instance on VSI vpna.

[SwitchB] vsi vpna

[SwitchB-vsi-vpna] evpn encapsulation vxlan

[SwitchB-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchB-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchB-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchB-vsi-vpna] igmp-snooping enable

[SwitchB-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchB-vsi-vpna] vxlan 10

[SwitchB-vsi-vpna-vxlan-10] quit

[SwitchB-vsi-vpna] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchB] bgp 200

[SwitchB-bgp-default] peer 5.5.5.5 as-number 200

[SwitchB-bgp-default] peer 5.5.5.5 connect-interface loopback 0

[SwitchB-bgp-default] peer 6.6.6.6 as-number 200

[SwitchB-bgp-default] peer 6.6.6.6 connect-interface loopback 0

[SwitchB-bgp-default] address-family l2vpn evpn

[SwitchB-bgp-default-evpn] peer 5.5.5.5 enable

[SwitchB-bgp-default-evpn] peer 6.6.6.6 enable

[SwitchB-bgp-default-evpn] quit

[SwitchB-bgp-default] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchB] ip vpn-instance vpna

[SwitchB-vpn-instance-vpna] route-distinguisher 1:1

[SwitchB-vpn-instance-vpna] address-family ipv4

[SwitchB-vpn-ipv4-vpna] vpn-target 2:2

[SwitchB-vpn-ipv4-vpna] quit

[SwitchB-vpn-instance-vpna] address-family evpn

[SwitchB-vpn-evpn-vpna] vpn-target 1:1

[SwitchB-vpn-evpn-vpna] quit

[SwitchB-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchB] interface vsi-interface 1

[SwitchB-Vsi-interface1] ip binding vpn-instance vpna

[SwitchB-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchB-Vsi-interface1] pim sm

[SwitchB-Vsi-interface1] igmp enable

[SwitchB-Vsi-interface1] pim distributed-dr

[SwitchB-Vsi-interface1] mac-address 1-1-1

[SwitchB-Vsi-interface1] distributed-gateway local

[SwitchB-Vsi-interface1] local-proxy-arp enable

[SwitchB-Vsi-interface1] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchB] interface vsi-interface 3

[SwitchB-Vsi-interface3] ip binding vpn-instance vpna

[SwitchB-Vsi-interface3] l3-vni 1000

[SwitchB-Vsi-interface3] pim sm

[SwitchB-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchB] multicast routing vpn-instance vpna

[SwitchB-mrib-vpna] quit

# Configure Loopback 0.

[SwitchB] interface loopback 0

[SwitchB-LoopBack0] ip address 2.2.2.2 32

[SwitchB-LoopBack0] pim sm

[SwitchB-LoopBack0] ospf 1 area 0

[SwitchB-LoopBack0] quit

# Configure Loopback 1.

[SwitchB] interface loopback 1

[SwitchB-LoopBack1] ip address 1.2.3.4 32

[SwitchB-LoopBack1] pim sm

[SwitchB-LoopBack1] ospf 1 area 0

[SwitchB-LoopBack1] quit

# Configure Loopback 2.

[SwitchB] interface loopback 2

[SwitchB-LoopBack2] ip binding vpn-instance vpna

[SwitchB-LoopBack2] ip address 1.2.3.4 32

[SwitchB-LoopBack2] pim sm

[SwitchB-LoopBack2] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchB] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchB-mvxlan-vpna] address-family ipv4

[SwitchB-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchB-mvxlan-vpna-ipv4] source loopback 1 evpn-drni-group

[SwitchB-mvxlan-vpna-ipv4] data-group 239.0.0.1 24

[SwitchB-mvxlan-vpna-ipv4] quit

[SwitchB-mvxlan-vpna] quit

# Enter VPN instance PIM view, and configure Loopback 2 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchB] pim vpn-instance vpna

[SwitchB-pim-vpna] c-bsr 1.2.3.4

[SwitchB-pim-vpna] c-rp 1.2.3.4

[SwitchB-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchB] vsi vpna

[SwitchB-vsi-vpna] gateway vsi-interface 1

[SwitchB-vsi-vpna] quit

# Configure a DR interface.

[SwitchB] interface bridge-aggregation 21

[SwitchB-Bridge-Aggregation21] port link-type trunk

[SwitchB-Bridge-Aggregation21] port trunk permit vlan 1 20 to 29

[SwitchB-Bridge-Aggregation21] link-aggregation mode dynamic

[SwitchB-Bridge-Aggregation21] port drni group 1

# Map Ethernet service instance 100 to VSI vpna.

[SwitchB-Bridge-Aggregation21] service-instance 100

[SwitchB-Bridge-Aggregation21-srv100] encapsulation s-vid 21

[SwitchB-Bridge-Aggregation21-srv100] xconnect vsi vpna

[SwitchB-Bridge-Aggregation21-srv100] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the DR interface.

[SwitchB] interface twenty-fivegige 1/0/1

[SwitchB-Twenty-FiveGigE1/0/1] port link-aggregation group 1

[SwitchB-Twenty-FiveGigE1/0/1] quit

# Configure an aggregate interface as the IPP.

[SwitchB] interface bridge-aggregation 9

[SwitchB-Bridge-Aggregation9] port link-type trunk

[SwitchB-Bridge-Aggregation9] port trunk permit vlan all

[SwitchB-Bridge-Aggregation9] link-aggregation mode dynamic

[SwitchB-Bridge-Aggregation9] port drni intra-portal-port 1

[SwitchB-Bridge-Aggregation9] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the IPP.

[SwitchB] interface twenty-fivegige 1/0/2

[SwitchB-Twenty-FiveGigE1/0/2] port link-aggregation group 9

[SwitchB-Twenty-FiveGigE1/0/2] quit

# Exclude the interface used for setting up the keepalive link from the shutdown action by DRNI MAD.

[SwitchB] drni mad exclude interface twenty-fivegige 1/0/3

# Configure DR system parameters.

[SwitchB] drni restore-delay 180

[SwitchB] drni system-mac 1-1-1

[SwitchB] drni system-number 2

[SwitchB] drni system-priority 10

[SwitchB] drni keepalive ip destination 192.168.1.1 source 192.168.1.2

5. Configure Switch C:

# Enable L2VPN.

<SwitchC> system-view

[SwitchC] l2vpn enable

# Specify the virtual VTEP address as 1.2.3.6.

[SwitchC] evpn drni group 1.2.3.6

# Specify the IP addresses of the member devices in the DR system.

[SwitchC] evpn drni local 3.3.3.3 remote 4.4.4.4

# Enable IP multicast routing.

[SwitchC] multicast routing

[SwitchC-mrib] quit

# Enable the IGMP snooping feature.

[SwitchC] igmp-snooping

[SwitchC-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchC] vxlan tunnel mac-learning disable

[SwitchC] vxlan tunnel arp-learning disable

# Create an EVPN instance on VSI vpna.

[SwitchC] vsi vpna

[SwitchC-vsi-vpna] evpn encapsulation vxlan

[SwitchC-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchC-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchC-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchC-vsi-vpna] igmp-snooping enable

[SwitchC-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchC-vsi-vpna] vxlan 10

[SwitchC-vsi-vpna-vxlan-10] quit

[SwitchC-vsi-vpna] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchC] bgp 200

[SwitchC-bgp-default] peer 6.6.6.6 as-number 200

[SwitchC-bgp-default] peer 6.6.6.6 connect-interface loopback 0

[SwitchC-bgp-default] peer 5.5.5.5 as-number 200

[SwitchC-bgp-default] peer 5.5.5.5 connect-interface loopback 0

[SwitchC-bgp-default] address-family l2vpn evpn

[SwitchC-bgp-default-evpn] peer 6.6.6.6 enable

[SwitchC-bgp-default-evpn] peer 5.5.5.5 enable

[SwitchC-bgp-default-evpn] quit

[SwitchC-bgp-default] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchC] ip vpn-instance vpna

[SwitchC-vpn-instance-vpna] route-distinguisher 1:1

[SwitchC-vpn-instance-vpna] address-family ipv4

[SwitchC-vpn-ipv4-vpna] vpn-target 2:2

[SwitchC-vpn-ipv4-vpna] quit

[SwitchC-vpn-instance-vpna] address-family evpn

[SwitchC-vpn-evpn-vpna] vpn-target 1:1

[SwitchC-vpn-evpn-vpna] quit

[SwitchC-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchC] interface vsi-interface 1

[SwitchC-Vsi-interface1] ip binding vpn-instance vpna

[SwitchC-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchC-Vsi-interface1] pim sm

[SwitchC-Vsi-interface1] igmp enable

[SwitchC-Vsi-interface1] pim distributed-dr

[SwitchC-Vsi-interface1] mac-address 1-1-1

[SwitchC-Vsi-interface1] distributed-gateway local

[SwitchC-Vsi-interface1] local-proxy-arp enable

[SwitchC-Vsi-interface1] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchC] interface vsi-interface 3

[SwitchC-Vsi-interface3] ip binding vpn-instance vpna

[SwitchC-Vsi-interface3] l3-vni 1000

[SwitchC-Vsi-interface3] pim sm

[SwitchC-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchC] multicast routing vpn-instance vpna

[SwitchC-mrib-vpna] quit

# Configure Loopback 0.

[SwitchC] interface loopback 0

[SwitchC-LoopBack0] ip address 3.3.3.3 32

[SwitchC-LoopBack0] pim sm

[SwitchC-LoopBack0] ospf 1 area 0

[SwitchC-LoopBack1] quit

# Configure Loopback 1.

[SwitchC] interface loopback 1

[SwitchC-LoopBack1] ip address 1.2.3.6 32

[SwitchC-LoopBack1] pim sm

[SwitchC-LoopBack1] ospf 1 area 0

[SwitchC-LoopBack1] quit

# Configure Loopback 2.

[SwitchB] interface loopback 2

[SwitchC-LoopBack2] ip binding vpn-instance vpna

[SwitchC-LoopBack2] ip address 1.2.3.6 255.255.255.255

[SwitchC-LoopBack2] pim sm

[SwitchC-LoopBack2] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchC] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchC-mvxlan-vpna] address-family ipv4

[SwitchC-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchC-mvxlan-vpna-ipv4] source loopback 1 evpn-drni-group

[SwitchC-mvxlan-vpna-ipv4] data-group 239.0.1.0 24

[SwitchC-mvxlan-vpna-ipv4] drni local 3.3.3.3 remote 4.4.4.4

[SwitchC-mvxlan-vpna-ipv4] quit

[SwitchC-mvxlan-vpna] quit

# Enter VPN instance PIM view, and configure Loopback 2 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchC] pim vpn-instance vpna

[SwitchC-pim-vpna] c-bsr 1.2.3.6

[SwitchC-pim-vpna] c-rp 1.2.3.6

[SwitchC-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchC] vsi vpna

[SwitchC-vsi-vpna] gateway vsi-interface 1

[SwitchC-vsi-vpna] quit

# Configure a DR interface.

[SwitchC] interface bridge-aggregation 17

[SwitchC-Bridge-Aggregation17] link-aggregation mode dynamic

[SwitchC-Bridge-Aggregation17] port drni group 17

# Map Ethernet service instance 20 to VSI vpna.

[SwitchC-Bridge-Aggregation17] service-instance 20

[SwitchC-Bridge-Aggregation17-srv20] encapsulation s-vid 2

[SwitchC-Bridge-Aggregation17-srv20] xconnect vsi vpna

[SwitchC-Bridge-Aggregation17-srv20] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the DR interface.

[SwitchC] interface twenty-fivegige 1/0/1

[SwitchC-Twenty-FiveGigE1/0/1] port link-aggregation group 17

[SwitchC-Twenty-FiveGigE1/0/1] quit

# Configure an aggregate interface as the IPP.

[SwitchC] interface bridge-aggregation 9

[SwitchC-Bridge-Aggregation9] link-aggregation mode dynamic

[SwitchC-Bridge-Aggregation9] port drni intra-portal-port 1

[SwitchC-Bridge-Aggregation9] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the IPP.

[SwitchC] interface twenty-fivegige 1/0/2

[SwitchC-Twenty-FiveGigE1/0/2] port link-aggregation group 9

# Exclude the interface used for setting up the keepalive link from the shutdown action by DRNI MAD.

[SwitchC] drni mad exclude interface twenty-fivegige 1/0/3

# Configure DR system parameters.

[SwitchC] drni restore-delay 180

[SwitchC] drni system-mac 2-2-2

[SwitchC] drni system-number 1

[SwitchC] drni system-priority 10

[SwitchC] drni keepalive ip destination 192.168.3.2 source 192.168.3.1

# Configure Bridge-Aggregation 17 as a trunk port and configure it to permit VLANs 20 through 29.

[SwitchC] interface bridge-aggregation 17

[SwitchC-Bridge-Aggregation17] port link-type trunk

[SwitchC-Bridge-Aggregation17] undo port trunk permit vlan 1

[SwitchC-Bridge-Aggregation17] port trunk permit vlan 20 to 29

[SwitchC-Bridge-Aggregation17] quit

# Configure the IPP as a trunk port and configure it to permit all VLANs.

[SwitchC] interface bridge-aggregation 9

[SwitchC-Bridge-Aggregation9] port link-type trunk

[SwitchC-Bridge-Aggregation9] undo port trunk permit vlan 1

[SwitchC-Bridge-Aggregation9] port trunk permit vlan all

[SwitchC-Bridge-Aggregation9] quit

6. Configure Switch D:

# Enable L2VPN.

<SwitchD> system-view

[SwitchD] l2vpn enable

# Specify the virtual VTEP address as 1.2.3.6.

[SwitchD] evpn drni group 1.2.3.6

# Specify the IP addresses of the member devices in the DR system.

[SwitchD] evpn drni local 4.4.4.4 remote 3.3.3.3

# Enable IP multicast routing.

[SwitchD] multicast routing

[SwitchD-mrib] quit

# Enable the IGMP snooping feature.

[SwitchD] igmp-snooping

[SwitchD-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchD] vxlan tunnel mac-learning disable

[SwitchD] vxlan tunnel arp-learning disable

# Create an EVPN instance on VSI vpna.

[SwitchD] vsi vpna

[SwitchD-vsi-vpna] evpn encapsulation vxlan

[SwitchD-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchD-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchD-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchD-vsi-vpna] igmp-snooping enable

[SwitchD-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchD-vsi-vpna] vxlan 10

[SwitchD-vsi-vpna-vxlan-10] quit

[SwitchD-vsi-vpna] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchD] bgp 200

[SwitchD-bgp-default] peer 6.6.6.6 as-number 200

[SwitchD-bgp-default] peer 6.6.6.6 connect-interface loopback 0

[SwitchD-bgp-default] peer 5.5.5.5 as-number 200

[SwitchD-bgp-default] peer 5.5.5.5 connect-interface loopback 0

[SwitchD-bgp-default] address-family l2vpn evpn

[SwitchD-bgp-default-evpn] peer 6.6.6.6 enable

[SwitchD-bgp-default-evpn] peer 5.5.5.5 enable

[SwitchD-bgp-default-evpn] quit

[SwitchD-bgp-default] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchD] ip vpn-instance vpna

[SwitchD-vpn-instance-vpna] route-distinguisher 1:1

[SwitchD-vpn-instance-vpna] address-family ipv4

[SwitchD-vpn-ipv4-vpna] vpn-target 2:2

[SwitchD-vpn-ipv4-vpna] quit

[SwitchD-vpn-instance-vpna] address-family evpn

[SwitchD-vpn-evpn-vpna] vpn-target 1:1

[SwitchD-vpn-evpn-vpna] quit

[SwitchD-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchD] interface vsi-interface 1

[SwitchD-Vsi-interface1] ip binding vpn-instance vpna

[SwitchD-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchD-Vsi-interface1] pim sm

[SwitchD-Vsi-interface1] igmp enable

[SwitchD-Vsi-interface1] pim distributed-dr

[SwitchD-Vsi-interface1] mac-address 1-1-1

[SwitchD-Vsi-interface1] distributed-gateway local

[SwitchD-Vsi-interface1] local-proxy-arp enable

[SwitchD-Vsi-interface1] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchD] interface vsi-interface 3

[SwitchD-Vsi-interface3] ip binding vpn-instance vpna

[SwitchD-Vsi-interface3] l3-vni 1000

[SwitchD-Vsi-interface3] pim sm

[SwitchD-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchD] multicast routing vpn-instance vpna

[SwitchD-mrib-vpna] quit

# Configure Loopback 0.

[SwitchD] interface loopback 0

[SwitchD-LoopBack0] ip address 4.4.4.4 32

[SwitchD-LoopBack0] pim sm

[SwitchD-LoopBack0] ospf 1 area 0

[SwitchD-LoopBack1] quit

# Configure Loopback 1.

[SwitchD] interface loopback 1

[SwitchD-LoopBack1] ip address 1.2.3.6 32

[SwitchD-LoopBack1] pim sm

[SwitchD-LoopBack1] ospf 1 area 0

[SwitchD-LoopBack1] quit

# Configure Loopback 2.

[SwitchD] interface loopback 2

[SwitchD-LoopBack2] ip binding vpn-instance vpna

[SwitchD-LoopBack2] ip address 1.2.3.6 255.255.255.255

[SwitchD-LoopBack2] pim sm

[SwitchD-LoopBack2] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchD] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchD-mvxlan-vpna] address-family ipv4

[SwitchD-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchD-mvxlan-vpna-ipv4] source loopback 1 evpn-drni-group

[SwitchD-mvxlan-vpna-ipv4] data-group 239.0.1.0 24

[SwitchD-mvxlan-vpna-ipv4] drni local 4.4.4.4 remote 3.3.3.3

[SwitchD-mvxlan-vpna-ipv4] quit

[SwitchD-mvxlan-vpna] quit

# Enter VPN instance PIM view, and configure Loopback 2 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchD] pim vpn-instance vpna

[SwitchD-pim-vpna] c-bsr 1.2.3.6

[SwitchD-pim-vpna] c-rp 1.2.3.6

[SwitchD-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchD] vsi vpna

[SwitchD-vsi-vpna] gateway vsi-interface 1

[SwitchD-vsi-vpna] quit

# Configure a DR interface.

[SwitchD] interface bridge-aggregation 17

[SwitchD-Bridge-Aggregation17] link-aggregation mode dynamic

[SwitchD-Bridge-Aggregation17] port drni group 17

# Map Ethernet service instance 20 to VSI vpna.

[SwitchD-Bridge-Aggregation17] service-instance 20

[SwitchD-Bridge-Aggregation17-srv20] encapsulation s-vid 2

[SwitchD-Bridge-Aggregation17-srv20] xconnect vsi vpna

[SwitchD-Bridge-Aggregation17-srv20] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the DR interface.

[SwitchD] interface twenty-fivegige 1/0/1

[SwitchD-Twenty-FiveGigE1/0/1] port link-aggregation group 17

[SwitchD-Twenty-FiveGigE1/0/1] quit

# Configure an aggregate interface as the IPP.

[SwitchD] interface bridge-aggregation 9

[SwitchD-Bridge-Aggregation9] link-aggregation mode dynamic

[SwitchD-Bridge-Aggregation9] port drni intra-portal-port 1

[SwitchD-Bridge-Aggregation9] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the IPP.

[SwitchD] interface twenty-fivegige 1/0/2

[SwitchD-Twenty-FiveGigE1/0/2] port link-aggregation group 9

# Exclude the interface used for setting up the keepalive link from the shutdown action by DRNI MAD.

[SwitchD] drni mad exclude interface twenty-fivegige 1/0/3

# Configure DR system parameters.

[SwitchD] drni restore-delay 180

[SwitchD] drni system-mac 2-2-2

[SwitchD] drni system-number 2

[SwitchD] drni system-priority 10

[SwitchD] drni keepalive ip destination 192.168.3.1 source 192.168.3.2

# Configure Bridge-Aggregation 17 as a trunk port and configure it to permit VLANs 20 through 29.

[SwitchD] interface bridge-aggregation 17

[SwitchD-Bridge-Aggregation17] port link-type trunk

[SwitchD-Bridge-Aggregation17] undo port trunk permit vlan 1

[SwitchD-Bridge-Aggregation17] port trunk permit vlan 20 to 29

[SwitchD-Bridge-Aggregation17] quit

# Configure the IPP as a trunk port and configure it to permit all VLANs.

[SwitchD] interface bridge-aggregation 9

[SwitchD-Bridge-Aggregation9] port link-type trunk

[SwitchD-Bridge-Aggregation9] undo port trunk permit vlan 1

[SwitchD-Bridge-Aggregation9] port trunk permit vlan all

[SwitchD-Bridge-Aggregation9] quit

7. Configure Switch E:

# Enable L2VPN.

<SwitchE> system-view

[SwitchE] l2vpn enable

# Specify the virtual VTEP address as 1.2.3.5.

[SwitchE] evpn drni group 1.2.3.5

# Specify the IP addresses of the member devices in the DR system.

[SwitchE] evpn drni local 5.5.5.5 remote 6.6.6.6

# Enable IP multicast routing.

[SwitchE] multicast routing

[SwitchE-mrib] quit

# Enable the IGMP snooping feature.

[SwitchE] igmp-snooping

[SwitchE-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchE] vxlan tunnel mac-learning disable

[SwitchE] vxlan tunnel arp-learning disable

# Create an EVPN instance on VSI vpna.

[SwitchE] vsi vpna

[SwitchE-vsi-vpna] evpn encapsulation vxlan

[SwitchE-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchE-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchE-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchE-vsi-vpna] igmp-snooping enable

[SwitchE-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchE-vsi-vpna] vxlan 10

[SwitchE-vsi-vpna-vxlan-10] quit

[SwitchE-vsi-vpna] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchE] bgp 200

[SwitchE-bgp-default] non-stop-routing

[SwitchE-bgp-default] group evpn internal

[SwitchE-bgp-default] peer evpn connect-interface loopback 0

[SwitchE-bgp-default] peer 1.1.1.1 group evpn

[SwitchE-bgp-default] peer 2.2.2.2 group evpn

[SwitchE-bgp-default] peer 3.3.3.3 group evpn

[SwitchE-bgp-default] peer 4.4.4.4 group evpn

[SwitchE-bgp-default] peer 6.6.6.6 group evpn

[SwitchE-bgp-default] address-family l2vpn evpn

[SwitchE-bgp-default-evpn] undo policy vpn-target

[SwitchE-bgp-default-evpn] peer evpn enable

[SwitchE-bgp-default-evpn] peer evpn next-hop-local

[SwitchE-bgp-default-evpn] peer evpn reflect-client

[SwitchE-bgp-default-evpn] quit

[SwitchE-bgp-default] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchE] ip vpn-instance vpna

[SwitchE-vpn-instance-vpna] route-distinguisher 1:1

[SwitchE-vpn-instance-vpna] address-family ipv4

[SwitchE-vpn-ipv4-vpna] vpn-target 2:2

[SwitchE-vpn-ipv4-vpna] quit

[SwitchE-vpn-instance-vpna] address-family evpn

[SwitchE-vpn-evpn-vpna] vpn-target 1:1

[SwitchE-vpn-evpn-vpna] quit

[SwitchE-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchE] interface vsi-interface 1

[SwitchE-Vsi-interface1] ip binding vpn-instance vpna

[SwitchE-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchE-Vsi-interface1] pim sm

[SwitchE-Vsi-interface1] igmp enable

[SwitchE-Vsi-interface1] pim distributed-dr

[SwitchE-Vsi-interface1] mac-address 1-1-1

[SwitchE-Vsi-interface1] distributed-gateway local

[SwitchE-Vsi-interface1] local-proxy-arp enable

[SwitchE-Vsi-interface1] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchE] interface vsi-interface 3

[SwitchE-Vsi-interface3] ip binding vpn-instance vpna

[SwitchE-Vsi-interface3] l3-vni 1000

[SwitchE-Vsi-interface3] pim sm

[SwitchE-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchE] multicast routing vpn-instance vpna

[SwitchE-mrib-vpna] quit

# Configure Loopback 0.

[SwitchE] interface loopback 0

[SwitchE-LoopBack0] ip address 5.5.5.5 32

[SwitchE-LoopBack0] ospf 1 area 0

[SwitchE-LoopBack0] quit

# Configure Loopback 1.

[SwitchE] interface loopback 1

[SwitchE-LoopBack1] ip address 1.2.3.5 32

[SwitchE-LoopBack1] ospf 1 area 0

[SwitchE-LoopBack1] quit

# Configure Loopback 2.

[SwitchE] interface loopback 2

[SwitchE-LoopBack2] ip binding vpn-instance vpna

[SwitchE-LoopBack2] ip address 1.2.3.5 255.255.255.255

[SwitchE-LoopBack2] pim sm

[SwitchE-LoopBack2] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchE] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchE-mvxlan-vpna] address-family ipv4

[SwitchE-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchE-mvxlan-vpna-ipv4] source loopback 1 evpn-drni-group

[SwitchE-mvxlan-vpna-ipv4] data-group 239.0.0.1 24

[SwitchE-mvxlan-vpna-ipv4] quit

[SwitchE-mvxlan-vpna] quit

# Enter VPN instance PIM view, and configure Loopback 2 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchE] pim vpn-instance vpna

[SwitchE-pim-vpna] c-bsr 1.2.3.5

[SwitchE-pim-vpna] c-rp 1.2.3.5

[SwitchE-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchE] vsi vpna

[SwitchE-vsi-vpna] gateway vsi-interface 1

[SwitchE-vsi-vpna] quit

# Configure a DR interface.

[SwitchE] interface bridge-aggregation 17

[SwitchE-Bridge-Aggregation17] link-aggregation mode dynamic

[SwitchE-Bridge-Aggregation17] port drni group 17

# Map Ethernet service instance 20 to VSI vpna.

[SwitchE-Bridge-Aggregation17] service-instance 20

[SwitchE-Bridge-Aggregation17-srv20] encapsulation s-vid 2

[SwitchE-Bridge-Aggregation17-srv20] xconnect vsi vpna

[SwitchE-Bridge-Aggregation17-srv20] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the DR interface.

[SwitchE] interface twenty-fivegige 1/0/1

[SwitchE-Twenty-FiveGigE1/0/1] port link-aggregation group 17

[SwitchE-Twenty-FiveGigE1/0/1] quit

# Configure an aggregate interface as the IPP.

[SwitchE] interface bridge-aggregation 9

[SwitchE-Bridge-Aggregation9] port link-type trunk

[SwitchE-Bridge-Aggregation9] port trunk permit vlan all

[SwitchE-Bridge-Aggregation9] link-aggregation mode dynamic

[SwitchE-Bridge-Aggregation9] port drni intra-portal-port 1

[SwitchE-Bridge-Aggregation9] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the IPP.

[SwitchE] interface twenty-fivegige 1/0/2

[SwitchE-Twenty-FiveGigE1/0/2] port link-aggregation group 9

[SwitchE-Twenty-FiveGigE1/0/2] quit

# Exclude the interface used for setting up the keepalive link from the shutdown action by DRNI MAD.

[SwitchE] drni mad exclude interface twenty-fivegige 1/0/3

# Configure DR system parameters.

[SwitchE] drni restore-delay 180

[SwitchE] drni system-mac 2-2-2

[SwitchE] drni system-number 1

[SwitchE] drni system-priority 10

[SwitchE] drni keepalive ip destination 192.168.4.2 source 192.168.4.1

# Configure Bridge-Aggregation 17 as a trunk port and configure it to permit VLANs 20 through 29.

[SwitchE] interface bridge-aggregation 17

[SwitchE-Bridge-Aggregation17] port link-type trunk

[SwitchE-Bridge-Aggregation17] undo port trunk permit vlan 1

[SwitchE-Bridge-Aggregation17] port trunk permit vlan 20 to 29

[SwitchE-Bridge-Aggregation17] quit

# Configure the IPP as a trunk port and configure it to permit all VLANs.

[SwitchE] interface bridge-aggregation 9

[SwitchE-Bridge-Aggregation9] port link-type trunk

[SwitchE-Bridge-Aggregation9] undo port trunk permit vlan 1

[SwitchE-Bridge-Aggregation9] port trunk permit vlan all

[SwitchE-Bridge-Aggregation9] quit

8. Configure Switch F:

# Enable L2VPN.

<SwitchF> system-view

[SwitchF] l2vpn enable

# Specify the virtual VTEP address as 1.2.3.5.

[SwitchF] evpn drni group 1.2.3.5

# Specify the IP addresses of the member devices in the DR system.

[SwitchF] evpn drni local 6.6.6.6 remote 5.5.5.5

# Enable IP multicast routing.

[SwitchF] multicast routing

[SwitchF-mrib] quit

# Enable the IGMP snooping feature.

[SwitchF] igmp-snooping

[SwitchF-igmp-snooping] quit

# Disable remote MAC address learning and remote ARP learning.

[SwitchF] vxlan tunnel mac-learning disable

[SwitchF] vxlan tunnel arp-learning disable

# Create an EVPN instance on VSI vpna.

[SwitchF] vsi vpna

[SwitchF-vsi-vpna] evpn encapsulation vxlan

[SwitchF-vsi-vpna-evpn-vxlan] route-distinguisher auto

[SwitchF-vsi-vpna-evpn-vxlan] vpn-target auto

[SwitchF-vsi-vpna-evpn-vxlan] quit

# Enable IGMP snooping and IGMP snooping proxying on VSI vpna.

[SwitchF-vsi-vpna] igmp-snooping enable

[SwitchF-vsi-vpna] igmp-snooping proxy enable

# Create VXLAN 10.

[SwitchF-vsi-vpna] vxlan 10

[SwitchF-vsi-vpna-vxlan-10] quit

[SwitchF-vsi-vpna] quit

# Configure BGP to advertise BGP EVPN routes.

[SwitchF] bgp 200

[SwitchF-bgp-default] non-stop-routing

[SwitchF-bgp-default] group evpn internal

[SwitchF-bgp-default] peer evpn connect-interface LoopBack0

[SwitchF-bgp-default] peer 1.1.1.1 group evpn

[SwitchF-bgp-default] peer 2.2.2.2 group evpn

[SwitchF-bgp-default] peer 3.3.3.3 group evpn

[SwitchF-bgp-default] peer 4.4.4.4 group evpn

[SwitchF-bgp-default] peer 5.5.5.5 group evpn

[SwitchF-bgp-default] address-family l2vpn evpn

[SwitchF-bgp-default-evpn] undo policy vpn-target

[SwitchF-bgp-default-evpn] peer evpn enable

[SwitchF-bgp-default-evpn] peer evpn next-hop-local

[SwitchF-bgp-default-evpn] peer evpn reflect-client

[SwitchF-bgp-default-evpn] quit

[SwitchF-bgp-default] quit

# Configure RD and route target settings for VPN instance vpna.

[SwitchF] ip vpn-instance vpna

[SwitchF-vpn-instance-vpna] route-distinguisher 1:1

[SwitchF-vpn-instance-vpna] address-family ipv4

[SwitchF-vpn-ipv4-vpna] vpn-target 2:2

[SwitchF-vpn-ipv4-vpna] quit

[SwitchF-vpn-instance-vpna] address-family evpn

[SwitchF-vpn-evpn-vpna] vpn-target 1:1

[SwitchF-vpn-evpn-vpna] quit

[SwitchF-vpn-instance-vpna] quit

# Configure VSI-interface 1.

[SwitchF] interface vsi-interface 1

[SwitchF-Vsi-interface1] ip binding vpn-instance vpna

[SwitchF-Vsi-interface1] ip address 10.1.1.1 255.255.255.0

[SwitchF-Vsi-interface1] pim sm

[SwitchF-Vsi-interface1] igmp enable

[SwitchF-Vsi-interface1] pim distributed-dr

[SwitchF-Vsi-interface1] mac-address 1-1-1

[SwitchF-Vsi-interface1] distributed-gateway local

[SwitchF-Vsi-interface1] local-proxy-arp enable

[SwitchF-Vsi-interface1] quit

# Associate VSI-interface 3 with VPN instance vpna, and configure the L3 VXLAN ID as 1000 for the VPN instance.

[SwitchF] interface vsi-interface 3

[SwitchF-Vsi-interface3] ip binding vpn-instance vpna

[SwitchF-Vsi-interface3] l3-vni 1000

[SwitchF-Vsi-interface3] pim sm

[SwitchF-Vsi-interface3] quit

# Enable IP multicast routing for VPN instance vpna.

[SwitchF] multicast routing vpn-instance vpna

[SwitchF-mrib-vpna] quit

# Configure Loopback 0.

[SwitchF] interface loopback 0

[SwitchF-LoopBack0] ip address 6.6.6.6 32

[SwitchF-LoopBack0] ospf 1 area 0

[SwitchF-LoopBack0] quit

# Configure Loopback 1.

[SwitchF] interface loopback 1

[SwitchF-LoopBack1] ip address 1.2.3.5 32

[SwitchF-LoopBack1] ospf 1 area 0

[SwitchF-LoopBack1] quit

# Configure Loopback 2.

[SwitchF] interface loopback 2

[SwitchF-LoopBack2] ip binding vpn-instance vpna

[SwitchF-LoopBack2] ip address 1.2.3.5 255.255.255.255

[SwitchF-LoopBack2] pim sm

[SwitchF-LoopBack2] quit

# Create an MDT-based MVXLAN for VPN instance vpna and enter MVXLAN IPv4 address family view. Configure the default group, MVXLAN source interface, and data group range settings.

[SwitchF] multicast-vpn vxlan vpn-instance vpna mode mdt

[SwitchF-mvxlan-vpna] address-family ipv4

[SwitchF-mvxlan-vpna-ipv4] default-group 236.0.0.1

[SwitchF-mvxlan-vpna-ipv4] source loopback 1 evpn-drni-group

[SwitchF-mvxlan-vpna-ipv4] data-group 239.0.0.1 24

[SwitchF-mvxlan-vpna-ipv4] quit

[SwitchF-mvxlan-vpna] quit

# Enter VPN instance PIM view, and configure Loopback 2 as a candidate-BSR and candidate-RP in VPN instance vpna.

[SwitchF] pim vpn-instance vpna

[SwitchF-pim-vpna] c-bsr 1.2.3.5

[SwitchF-pim-vpna] c-rp 1.2.3.5

[SwitchF-pim-vpna] quit

# Specify VSI-interface 1 as the gateway interface for VSI vpna.

[SwitchF] vsi vpna

[SwitchF-vsi-vpna] gateway vsi-interface 1

[SwitchF-vsi-vpna] quit

# Configure a DR interface.

[SwitchF] interface bridge-aggregation 17

[SwitchF-Bridge-Aggregation17] link-aggregation mode dynamic

[SwitchF-Bridge-Aggregation17] port drni group 17

# Map Ethernet service instance 20 to VSI vpna.

[SwitchF-Bridge-Aggregation17] service-instance 20

[SwitchF-Bridge-Aggregation17-srv20] encapsulation s-vid 2

[SwitchF-Bridge-Aggregation17-srv20] xconnect vsi vpna

[SwitchF-Bridge-Aggregation17-srv20] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the DR interface.

[SwitchF] interface twenty-fivegige 1/0/1

[SwitchF-Twenty-FiveGigE1/0/1] port link-aggregation group 17

[SwitchF-Twenty-FiveGigE1/0/1] quit

# Configure an aggregate interface as the IPP.

[SwitchF] interface bridge-aggregation 9

[SwitchF-Bridge-Aggregation9] port link-type trunk

[SwitchF-Bridge-Aggregation9] port trunk permit vlan all

[SwitchF-Bridge-Aggregation9] link-aggregation mode dynamic

[SwitchF-Bridge-Aggregation9] port drni intra-portal-port 1

[SwitchF-Bridge-Aggregation9] quit

# Assign a Layer 2 Ethernet interface to the aggregation group of the IPP.

[SwitchF] interface twenty-fivegige 1/0/2

[SwitchF-Twenty-FiveGigE1/0/2] port link-aggregation group 9

[SwitchF-Twenty-FiveGigE1/0/2] quit

# Exclude the interface used for setting up the keepalive link from the shutdown action by DRNI MAD.

[SwitchF] drni mad exclude interface twenty-fivegige 1/0/3

# Configure DR system parameters.

[SwitchF] drni restore-delay 180

[SwitchF] drni system-mac 2-2-2

[SwitchF] drni system-number 2

[SwitchF] drni system-priority 10

[SwitchF] drni keepalive ip destination 192.168.4.1 source 192.168.4.2

# Configure Bridge-Aggregation 17 as a trunk port and configure it to permit VLANs 20 through 29.

[SwitchF] interface bridge-aggregation 17

[SwitchF-Bridge-Aggregation17] port link-type trunk

[SwitchF-Bridge-Aggregation17] undo port trunk permit vlan 1

[SwitchF-Bridge-Aggregation17] port trunk permit vlan 20 to 29

[SwitchF-Bridge-Aggregation17] quit

# Configure the IPP as a trunk port and configure it to permit all VLANs.

[SwitchF] interface bridge-aggregation 9

[SwitchF-Bridge-Aggregation9] port link-type trunk

[SwitchF-Bridge-Aggregation9] undo port trunk permit vlan 1

[SwitchF-Bridge-Aggregation9] port trunk permit vlan all

[SwitchF-Bridge-Aggregation9] quit

Verifying the configuration

1. Verify the VXLAN tunnel and VSI configuration on Switch A:

# Verify that the VXLAN tunnels are up, and the virtual VTEP address is used as the source address of some VXLAN tunnels.

[SwitchA] display interface tunnel

Tunnel0

Current state: UP

Line protocol state: UP

Description: Tunnel0 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Output queue - Urgent queuing: Size/Length/Discards 0/100/0

Output queue - Protocol queuing: Size/Length/Discards 0/500/0

Output queue - FIFO queuing: Size/Length/Discards 0/75/0

Last clearing of counters: Never

Tunnel source 1.2.3.4, destination 6.6.6.6

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Tunnel1

Current state: UP

Line protocol state: UP

Description: Tunnel1 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Output queue - Urgent queuing: Size/Length/Discards 0/100/0

Output queue - Protocol queuing: Size/Length/Discards 0/500/0

Output queue - FIFO queuing: Size/Length/Discards 0/75/0

Last clearing of counters: Never

Tunnel source 1.1.1.1, destination 2.2.2.2

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 1159 packets, 176556 bytes, 0 drops

Output: 1176 packets, 178121 bytes, 0 drops

Tunnel2

Current state: UP

Line protocol state: UP

Description: Tunnel2 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Output queue - Urgent queuing: Size/Length/Discards 0/100/0

Output queue - Protocol queuing: Size/Length/Discards 0/500/0

Output queue - FIFO queuing: Size/Length/Discards 0/75/0

Last clearing of counters: Never

Tunnel source 1.2.3.4, destination 3.3.3.3

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Tunnel3

Current state: UP

Line protocol state: UP

Description: Tunnel3 Interface

Bandwidth: 64 kbps

Maximum transmission unit: 1464

Internet protocol processing: Disabled

Output queue - Urgent queuing: Size/Length/Discards 0/100/0

Output queue - Protocol queuing: Size/Length/Discards 0/500/0

Output queue - FIFO queuing: Size/Length/Discards 0/75/0

Last clearing of counters: Never

Tunnel source 1.2.3.4, destination 1.2.3.6

Tunnel protocol/transport UDP_VXLAN/IP

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 8 packets, 480 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Verify that the VXLAN tunnels have been assigned to the VXLANs, and that the VSI interfaces are the gateway interfaces of their respective VXLANs.

[SwitchA] display l2vpn vsi verbose

VSI Name: vpna

VSI Index : 0

VSI State : Up

MTU : 1500

Bandwidth : -

Broadcast Restrain : -

Multicast Restrain : -

Unknown Unicast Restrain: -

MAC Learning : Enabled

MAC Table Limit : -

MAC Learning rate : -

Drop Unknown : -

Flooding : Enabled

Statistics : Disabled

Gateway Interface : VSI-interface 1

VXLAN ID : 10

Tunnels:

Tunnel Name Link ID State Type Flood proxy

Tunnel0 0x5000000 UP Auto Disabled

Tunnel1 0x5000001 UP Auto Disabled

Tunnel2 0x5000002 UP Auto Disabled

Tunnel3 0x5000003 UP Auto Disabled

ACs:

AC Link ID State Type

BAGG17 srv20 0 Up Manual

2. Verify the multicast routing information on Switch A:

# Display the multicast routing entries when the IPLs of the DR systems are up.

<SwitchA> display pim routing-table

Total 0 (*, G) entries; 2 (S, G) entries

(1.2.3.4, 236.0.0.1)

RP: 5.5.5.5

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 03:59:50

Upstream interface: MTunnel0 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Register-Tunnel0

Protocol: pim-sm, UpTime: 03:38:17, Expires: -

(1.2.3.6, 236.0.0.1)

RP: 5.5.5.5

Protocol: pim-sm, Flag: SPT

UpTime: 01:18:49

Upstream interface: Vlan-interface11

Upstream neighbor: 11.1.1.11

RPF prime neighbor: 11.1.1.11

Downstream interface information:

Total number of downstream interfaces: 1

1: MVXLAN-UPE1

Protocol: MD, UpTime: 01:18:49, Expires: -

# Display the multicast routing entries when the IPLs of the DR systems are down.

<SwitchA> display pim routing-table

Total 0 (*, G) entries; 4 (S, G) entries

(1.1.1.1, 236.0.0.1)

RP: 5.5.5.5

Protocol: pim-sm, Flag: SPT LOC VXLAN_L3

UpTime: 00:02:12

Upstream interface: MTunnel0 (VPN: vpna)

Upstream neighbor: NULL

RPF prime neighbor: NULL

Downstream interface information:

Total number of downstream interfaces: 1

1: Vlan-interface11

Protocol: pim-sm, UpTime: 00:02:11, Expires: 00:03:19

(2.2.2.2, 236.0.0.1)

RP: 5.5.5.5

Protocol: pim-sm, Flag: SPT

UpTime: 00:01:04

Upstream interface: Vlan-interface11

Upstream neighbor: 11.1.1.11

RPF prime neighbor: 11.1.1.11

Downstream interface information:

Total number of downstream interfaces: 1

1: MVXLAN-UPE0

Protocol: MD, UpTime: 00:01:04, Expires: -

(3.3.3.3, 236.0.0.1)

RP: 5.5.5.5

Protocol: pim-sm, Flag: SPT

UpTime: 00:01:36

Upstream interface: Vlan-interface11

Upstream neighbor: 11.1.1.11

RPF prime neighbor: 11.1.1.11

Downstream interface information:

Total number of downstream interfaces: 1

1: MVXLAN-UPE0

Protocol: MD, UpTime: 00:01:36, Expires: -

(6.6.6.6, 236.0.0.1)

RP: 5.5.5.5

Protocol: pim-sm, Flag: SPT

UpTime: 00:00:32

Upstream interface: Vlan-interface11

Upstream neighbor: 11.1.1.11

RPF prime neighbor: 11.1.1.11

Downstream interface information:

Total number of downstream interfaces: 1

1: MVXLAN-UPE0

Protocol: MD, UpTime: 00:00:32, Expires: -

3. Verify the multicast routing information on Switch E:

# Display the public multicast routing entries when the IPLs of the DR systems are up.

<SwitchE> display pim routing-table

Total 0 (*, G) entries; 2 (S, G) entries

(1.2.3.4, 236.0.0.1)

RP: 5.5.5.5 (local)

Protocol: pim-sm, Flag: SPT 2MSDP ACT 2MVPN

UpTime: 04:11:32

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.2

RPF prime neighbor: 12.1.1.2

Downstream interface information:

Total number of downstream interfaces: 2

1: Vlan-interface13

Protocol: pim-sm, UpTime: 01:33:53, Expires: 00:02:40

2: Vlan-interface14

Protocol: pim-sm, UpTime: 01:31:35, Expires: 00:02:40

(1.2.3.6, 236.0.0.1)

RP: 5.5.5.5 (local)

Protocol: pim-sm, Flag: SPT 2MSDP ACT 2MVPN

UpTime: 01:34:02

Upstream interface: Vlan-interface14

Upstream neighbor: 14.1.1.4

RPF prime neighbor: 14.1.1.4

Downstream interface information:

Total number of downstream interfaces: 2

1: Vlan-interface11

Protocol: pim-sm, UpTime: 01:30:50, Expires: 00:02:40

2: Vlan-interface12

Protocol: pim-sm, UpTime: 01:30:50, Expires: 00:02:41-

# Display the public multicast routing entries when the IPLs of the DR systems are up.

<SwitchE> display pim routing-table

Total 0 (*, G) entries; 2 (S, G) entries

(1.1.1.1, 236.0.0.1)

RP: 5.5.5.5 (local)

Protocol: pim-sm, Flag: SPT 2MSDP ACT 2MVPN

UpTime: 00:04:00

Upstream interface: Vlan-interface11

Upstream neighbor: 11.1.1.1

RPF prime neighbor: 11.1.1.1

Downstream interface information:

Total number of downstream interfaces: 3

1: Vlan-interface12

Protocol: pim-sm, UpTime: 00:02:51, Expires: 00:02:39

2: Vlan-interface13

Protocol: pim-sm, UpTime: 00:03:59, Expires: 00:03:06

3: Vlan-interface14

Protocol: pim-sm, UpTime: 00:03:59, Expires: 00:03:10

(2.2.2.2, 236.0.0.1)

RP: 5.5.5.5 (local)

Protocol: pim-sm, Flag: SPT 2MSDP ACT 2MVPN

UpTime: 00:02:52

Upstream interface: Vlan-interface12

Upstream neighbor: 12.1.1.2

RPF prime neighbor: 12.1.1.2

Downstream interface information:

Total number of downstream interfaces: 3

1: Vlan-interface11

Protocol: pim-sm, UpTime: 00:02:52, Expires: 00:02:38

2: Vlan-interface13

Protocol: pim-sm, UpTime: 00:02:52, Expires: 00:02:39

3: Vlan-interface14

Protocol: pim-sm, UpTime: 00:02:52, Expires: 00:03:10

(3.3.3.3, 236.0.0.1)

RP: 5.5.5.5 (local)

Protocol: pim-sm, Flag: SPT 2MSDP ACT 2MVPN

UpTime: 00:03:25

Upstream interface: Vlan-interface13

Upstream neighbor: 13.1.1.3

RPF prime neighbor: 13.1.1.3

Downstream interface information:

Total number of downstream interfaces: 3

1: Vlan-interface11

Protocol: pim-sm, UpTime: 00:03:24, Expires: 00:03:06

2: Vlan-interface12

Protocol: pim-sm, UpTime: 00:03:24, Expires: 00:02:38

3: Vlan-interface14

Protocol: pim-sm, UpTime: 00:02:20, Expires: 00:03:10

(6.6.6.6, 236.0.0.1)

RP: 5.5.5.5 (local)

Protocol: pim-sm, Flag: SPT 2MSDP ACT 2MVPN

UpTime: 00:02:20

Upstream interface: Vlan-interface14

Upstream neighbor: 14.1.1.4

RPF prime neighbor: 14.1.1.4

Downstream interface information:

Total number of downstream interfaces: 3

1: Vlan-interface11

Protocol: pim-sm, UpTime: 00:02:20, Expires: 00:03:10

2: Vlan-interface12

Protocol: pim-sm, UpTime: 00:02:20, Expires: 00:03:10

3: Vlan-interface13

Protocol: pim-sm, UpTime: 00:02:20, Expires: 00:03:11

16-EVPN Configuration Guide

MVXLAN benefits

MVXLAN network model

MP-BGP extension for MVXLAN

Automatic MVXLAN tunnel establishment and assignment

Default MDT-based transmission

MDT switchover

Switching from the default MDT to a data MDT

Switching from the data MDT to the default MDT

Overview

Mechanisms

Enabling IP multicast routing for a VPN instance

Creating an MVXLAN

About this task

Creating an MVXLAN for a VPN instance

Creating an MVXLAN for the public instance

Configuring a default group

Restrictions and guidelines

Procedure

Specifying the MVXLAN source interface

About this task

Restrictions and guidelines

Procedure

About this task

Restrictions and guidelines

Procedure

About this task

Procedure

About this task

Restrictions and guidelines

Procedure

About this task

Restrictions and guidelines

Procedure

Network configuration

Procedure

Network configuration

Software version and feature compatibility

Procedure

Verifying the configuration

Network configuration

Procedure

Verifying the configuration

Network configuration

Software version and feature compatibility

Procedure

Verifying the configuration

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

Company Information

News & Events

Contact Us